kernel.git/security/tomoyo/mount.c, branch linux-2.6.37.y

TOMOYO: Use pathname specified by policy rather than execve()

2010-08-02T05:38:38Z

Commit c9e69318 "TOMOYO: Allow wildcard for execute permission." changed execute permission and domainname to accept wildcards. But tomoyo_find_next_domain() was using pathname passed to execve() rather than pathname specified by the execute permission. As a result, processes were not able to transit to domains which contain wildcards in their domainnames. This patch passes pathname specified by the execute permission back to tomoyo_find_next_domain() so that processes can transit to domains which contain wildcards in their domainnames. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:54Z

Use shorter name in order to make it easier to fit 80 columns limit. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Loosen parameter check for mount operation.

2010-08-02T05:34:34Z

If invalid combination of mount flags are given, it will be rejected later. Thus, no need for TOMOYO to reject invalid combination of mount flags. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Rename symbols.

2010-08-02T05:34:33Z

Use shorter name in order to make it easier to fix 80 columns limit. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Use callback for permission check.

2010-08-02T05:34:32Z

We can use callback function since parameters are passed via "const struct tomoyo_request_info". Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Pass parameters via structure.

2010-08-02T05:34:32Z

To make it possible to use callback function, pass parameters via "struct tomoyo_request_info". Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Use callback for updating entries.

2010-08-02T05:34:28Z

Use common "struct list_head" + "bool" + "u8" structure and use common code for elements using that structure. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Update profile structure.

2010-08-02T05:33:43Z

This patch allows users to change access control mode for per-operation basis. This feature comes from non LSM version of TOMOYO which is designed for permitting users to use SELinux and TOMOYO at the same time. SELinux does not care filename in a directory whereas TOMOYO does. Change of filename can change how the file is used. For example, renaming index.txt to .htaccess will change how the file is used. Thus, letting SELinux to enforce read()/write()/mmap() etc. restriction and letting TOMOYO to enforce rename() restriction is an example usage of this feature. What is unfortunate for me is that currently LSM does not allow users to use SELinux and LSM version of TOMOYO at the same time... Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Support longer pathname.

2010-08-02T05:33:41Z

Allow pathnames longer than 4000 bytes. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris

TOMOYO: Add interactive enforcing mode.

2010-08-02T05:33:38Z

Since the behavior of the system is restricted by policy, we may need to update policy when you update packages. We need to update policy in the following cases. * The pathname of files has changed. * The dependency of files has changed. * The access permissions required has increased. The ideal way to update policy is to rebuild from the scratch using learning mode. But it is not desirable to change from enforcing mode to other mode if the system has once entered in production state. Suppose MAC could support per-application enforcing mode, the MAC becomes useless if an application that is not running in enforcing mode was cracked. For example, the whole system becomes vulnerable if only HTTP server application is running in learning mode to rebuild policy for the application. So, in TOMOYO Linux, updating policy is done while the system is running in enforcing mode. This patch implements "interactive enforcing mode" which allows administrators to judge whether to accept policy violation in enforcing mode or not. A demo movie is available at http://www.youtube.com/watch?v=b9q1Jo25LPA . Signed-off-by: Tetsuo Handa Signed-off-by: James Morris