kernel-ark/security/selinux
Roland McGrath 0356357c51 selinux: remove ptrace_sid
This changes checks related to ptrace to get rid of the ptrace_sid tracking.
It's good to disentangle the security model from the ptrace implementation
internals.  It's sufficient to check against the SID of the ptracer at the
time a tracee attempts a transition.

Signed-off-by: Roland McGrath <roland@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
2008-04-18 20:26:10 +10:00
..
include selinux: remove ptrace_sid 2008-04-18 20:26:10 +10:00
ss security: replace remaining __FUNCTION__ occurrences 2008-04-18 20:26:07 +10:00
avc.c SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() 2008-04-18 20:26:09 +10:00
exports.c SELinux: Enable dynamic enable/disable of the network access checks 2008-01-30 08:17:26 +11:00
hooks.c selinux: remove ptrace_sid 2008-04-18 20:26:10 +10:00
Kconfig SELinux: Add a capabilities bitmap to SELinux policy version 22 2008-01-30 08:17:23 +11:00
Makefile SELinux: Add a network node caching mechanism similar to the sel_netif_*() functions 2008-01-30 08:17:23 +11:00
netif.c SELinux: Add warning messages on network denial due to error 2008-01-30 08:17:30 +11:00
netlabel.c selinux: selinux/netlabel.c should #include "netlabel.h" 2008-04-18 20:26:06 +10:00
netlink.c security: replace remaining __FUNCTION__ occurrences 2008-04-18 20:26:07 +10:00
netnode.c SELinux: Add warning messages on network denial due to error 2008-01-30 08:17:30 +11:00
nlmsgtab.c Audit: add TTY input auditing 2007-07-16 09:05:47 -07:00
selinuxfs.c security: replace remaining __FUNCTION__ occurrences 2008-04-18 20:26:07 +10:00
xfrm.c SELinux: Enable dynamic enable/disable of the network access checks 2008-01-30 08:17:26 +11:00