linux-stable-rt/security/selinux
Stephen Smalley d313f94830 SELinux: detect dead booleans
Instead of using f_op to detect dead booleans, check the inode index
against the number of booleans and check the dentry name against the
boolean name for that index on reads and writes.  This prevents
incorrect use of a boolean file opened prior to a policy reload while
allowing valid use of it as long as it still corresponds to the same
boolean in the policy.

Signed-off-by:  Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
2007-12-06 00:24:09 +11:00
..
include
ss SELinux: add more validity checks on policy load 2007-11-08 08:56:23 +11:00
Kconfig
Makefile
avc.c
exports.c
hooks.c
netif.c
netlabel.c
netlink.c
nlmsgtab.c
selinuxfs.c SELinux: detect dead booleans 2007-12-06 00:24:09 +11:00
xfrm.c SELinux: suppress a warning for 64k pages. 2007-11-08 08:55:04 +11:00