kernel.git/security/tomoyo/file.c, branch linux-2.6.37.y

TOMOYO: Fix memory leak upon file open.

2011-03-23T19:50:09Z

commit eae61f3c829439f8f9121b5cd48a14be04df451f upstream. In tomoyo_check_open_permission() since 2.6.36, TOMOYO was by error recalculating already calculated pathname when checking allow_rewrite permission. As a result, memory will leak whenever a file is opened for writing without O_APPEND flag. Also, performance will degrade because TOMOYO is calculating pathname regardless of profile configuration. This patch fixes the leak and performance degrade. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris Signed-off-by: Greg Kroah-Hartman

TOMOYO: Use pathname specified by policy rather than execve()

2010-08-02T05:38:38Z

Commit c9e69318 "TOMOYO: Allow wildcard for execute permission." changed execute permission and domainname to accept wildcards. But tomoyo_find_next_domain() was using pathname passed to execve() rather than pathname specified by the execute permission. As a result, processes were not able to transit to domains which contain wildcards in their domainnames. This patch passes pathname specified by the execute permission back to tomoyo_find_next_domain() so that processes can transit to domains which contain wildcards in their domainnames. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:54Z

Use shorter name in order to make it easier to fit 80 columns limit. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Aggregate reader functions.

2010-08-02T05:34:41Z

Now lists are accessible via array index. Aggregate reader functions using index. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Use array of "struct list_head".

2010-08-02T05:34:40Z

Assign list id and make the lists as array of "struct list_head". Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Merge tomoyo_path_group and tomoyo_number_group

2010-08-02T05:34:40Z

"struct tomoyo_path_group" and "struct tomoyo_number_group" are identical. Rename tomoyo_path_group/tomoyo_number_group to tomoyo_group and tomoyo_path_group_member to tomoyo_path_group and tomoyo_number_group_member to tomoyo_unmber_group. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Merge functions.

2010-08-02T05:34:35Z

Embed tomoyo_path_number_perm2() into tomoyo_path_number_perm(). Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Remove wrapper function for reading keyword.

2010-08-02T05:34:34Z

Keyword strings are read-only. We can directly access them to reduce code size. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:33Z

Use shorter name in order to make it easier to fix 80 columns limit. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Use callback for permission check.

2010-08-02T05:34:32Z

We can use callback function since parameters are passed via "const struct tomoyo_request_info". Signed-off-by: Tetsuo Handa Signed-off-by: James Morris