• Rafal Krypa's avatar
    Smack: allow multiple labels in onlycap · c0d77c88
    Rafal Krypa authored
    Smack onlycap allows limiting of CAP_MAC_ADMIN and CAP_MAC_OVERRIDE to
    processes running with the configured label. But having single privileged
    label is not enough in some real use cases. On a complex system like Tizen,
    there maybe few programs that need to configure Smack policy in run-time
    and running them all with a single label is not always practical.
    This patch extends onlycap feature for multiple labels. They are configured
    in the same smackfs "onlycap" interface, separated by spaces.
    Signed-off-by: default avatarRafal Krypa <r.krypa@samsung.com>
    c0d77c88
smack_access.c 16.1 KB