Messages in this thread | | | From | Rafal Krypa <> | Subject | [PATCHv2] Smack: add support for modification of existing rules | Date | Thu, 10 Jan 2013 19:41:59 +0100 |
| |
The following patch introduces in-place modification of Smack rules. Until now Smack supported only overwriting of existing rules. To change permitted access for a given subject and object, user had to read list of rules to get current accesses, modify it and write modified rule back to kernel. This way was inefficient, non-atomic and unnecessarily difficult. New interface is intended to ease such modifications.
Changes in v2: - dropped patches for smackfs seq list operations - changed modification approach to simple integer assignment
Rafal Krypa (1): Smack: add support for modification of existing rules
Documentation/security/Smack.txt | 11 ++ security/smack/smackfs.c | 249 ++++++++++++++++++++++++++------------ 2 files changed, 181 insertions(+), 79 deletions(-)
-- 1.7.10.4
| |