Tetsuo Handa 731d37aa70 TOMOYO: Allow domain transition without execve(). ... To be able to split permissions for Apache's CGI programs which are executed without execve(), add special domain transition which is performed by writing a TOMOYO's domainname to /sys/kernel/security/tomoyo/self_domain interface. This is an API for TOMOYO-aware userland applications. However, since I expect TOMOYO and other LSM modules to run in parallel, this patch does not use /proc/self/attr/ interface in order to avoid conflicts with other LSM modules when it became possible to run multiple LSM modules in parallel. Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: James Morris <jmorris@namei.org>		2011-09-14 08:27:06 +10:00
..
audit.c	TOMOYO: Allow controlling generation of access granted logs for per an entry basis.	2011-09-14 08:27:06 +10:00
common.c	TOMOYO: Allow domain transition without execve().	2011-09-14 08:27:06 +10:00
common.h	TOMOYO: Allow domain transition without execve().	2011-09-14 08:27:06 +10:00
condition.c	TOMOYO: Allow controlling generation of access granted logs for per an entry basis.	2011-09-14 08:27:06 +10:00
domain.c	TOMOYO: Allow controlling generation of access granted logs for per an entry basis.	2011-09-14 08:27:06 +10:00
environ.c	TOMOYO: Add environment variable name restriction support.	2011-09-14 08:27:05 +10:00
file.c	TOMOYO: Update kernel-doc.	2011-07-14 17:50:03 +10:00
gc.c	TOMOYO: Add socket operation restriction support.	2011-09-14 08:27:05 +10:00
group.c	TOMOYO: Add socket operation restriction support.	2011-09-14 08:27:05 +10:00
Kconfig	TOMOYO: Add socket operation restriction support.	2011-09-14 08:27:05 +10:00
load_policy.c	TOMOYO: Update kernel-doc.	2011-07-14 17:50:03 +10:00
Makefile	TOMOYO: Add socket operation restriction support.	2011-09-14 08:27:05 +10:00
memory.c	TOMOYO: Update kernel-doc.	2011-07-14 17:50:03 +10:00
mount.c	TOMOYO: Update kernel-doc.	2011-07-14 17:50:03 +10:00
network.c	TOMOYO: Add socket operation restriction support.	2011-09-14 08:27:05 +10:00
realpath.c	TOMOYO: Add socket operation restriction support.	2011-09-14 08:27:05 +10:00
securityfs_if.c	TOMOYO: Allow domain transition without execve().	2011-09-14 08:27:06 +10:00
tomoyo.c	TOMOYO: Add socket operation restriction support.	2011-09-14 08:27:05 +10:00
util.c	TOMOYO: Allow domain transition without execve().	2011-09-14 08:27:06 +10:00