• Casey Schaufler's avatar
    Smack: Repair processing of fcntl · 531f1d45
    Casey Schaufler authored
    Al Viro pointed out that the processing of fcntl done
    by Smack appeared poorly designed. He was right. There
    are three things that required change. Most obviously,
    the list of commands that really imply writing is limited
    to those involving file locking and signal handling.
    The initialization if the file security blob was
    incomplete, requiring use of a heretofore unused LSM hook.
    Finally, the audit information coming from a helper
    masked the identity of the LSM hook. This patch corrects
    all three of these defects.
    
    This is targeted for the smack-next tree pending comments.
    Signed-off-by: default avatarCasey Schaufler <casey@schaufler-ca.com>
    531f1d45
smack_lsm.c 85.3 KB