kernel.git/security/tomoyo/common.c, branch linux-2.6.37.y

TOMOYO: Print URL information before panic().

2010-10-20T23:12:45Z

Configuration files for TOMOYO 2.3 are not compatible with TOMOYO 2.2. But current panic() message is too unfriendly and is confusing users. Signed-off-by: Tetsuo Handa Reviewed-by: KOSAKI Motohiro Signed-off-by: James Morris

tomoyo: cleanup. don't store bogus pointer

2010-10-20T23:12:32Z

If domain is NULL then &domain->list is a bogus address. Let's leave head->r.domain NULL instead of saving an unusable pointer. This is just a cleanup. The current code always checks head->r.eof before dereferencing head->r.domain. Signed-off-by: Dan Carpenter Acked-by: Tetsuo Handa

TOMOYO: Don't abuse sys_getpid(), sys_getppid()

2010-09-27T00:53:18Z

System call entry functions sys_*() are never to be called from general kernel code. The fact that they aren't declared in header files should have been a clue. These functions also don't exist on Alpha since it has sys_getxpid() instead. Signed-off-by: Ben Hutchings Acked-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Update version to 2.3.0

2010-08-02T05:35:10Z

Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Add missing poll() hook.

2010-08-02T05:34:55Z

Commit 1dae08c "TOMOYO: Add interactive enforcing mode." forgot to register poll() hook. As a result, /usr/sbin/tomoyo-queryd was doing busy loop. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:54Z

Use shorter name in order to make it easier to fit 80 columns limit. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Small cleanup.

2010-08-02T05:34:54Z

Split tomoyo_write_profile() into several functions. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Copy directly to userspace buffer.

2010-08-02T05:34:45Z

When userspace program reads policy from /sys/kernel/security/tomoyo/ interface, TOMOYO uses line buffered mode. A line has at least one word. Commit 006dacc "TOMOYO: Support longer pathname." changed a word's max length from 4000 bytes to max kmalloc()able bytes. By that commit, a line's max length changed from 8192 bytes to more than max kmalloc()able bytes. Max number of words in a line remains finite. This patch changes the way of buffering so that all words in a line are firstly directly copied to userspace buffer as much as possible and are secondly queued for next read request. Words queued are guaranteed to be valid until /sys/kernel/security/tomoyo/ interface is close()d. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Use common code for policy reading.

2010-08-02T05:34:45Z

tomoyo_print_..._acl() are similar. Merge them. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Allow reading only execute permission.

2010-08-02T05:34:44Z

Policy editor needs to know allow_execute entries in order to build domain transition tree. Reading all entries is slow. Thus, allow reading only allow_execute entries. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris