kernel-ark/security
Stephen Smalley db4c9641de [PATCH] selinux: fix and cleanup mprotect checks
Fix the SELinux mprotect checks on executable mappings so that they are not
re-applied when the mapping is already executable as well as cleaning up
the code.  This avoids a situation where e.g.  an application is prevented
from removing PROT_WRITE on an already executable mapping previously
authorized via execmem permission due to an execmod denial.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-02-01 08:53:18 -08:00
..
keys
selinux [PATCH] selinux: fix and cleanup mprotect checks 2006-02-01 08:53:18 -08:00
capability.c
commoncap.c
dummy.c
inode.c
Kconfig
Makefile
root_plug.c
seclvl.c Don't try to "validate" a non-existing timeval. 2006-01-31 10:16:55 -08:00
security.c