Files
ack-tegra/include/linux
Eric Paris 788084aba2 Security/SELinux: seperate lsm specific mmap_min_addr
Currently SELinux enforcement of controls on the ability to map low memory
is determined by the mmap_min_addr tunable.  This patch causes SELinux to
ignore the tunable and instead use a seperate Kconfig option specific to how
much space the LSM should protect.

The tunable will now only control the need for CAP_SYS_RAWIO and SELinux
permissions will always protect the amount of low memory designated by
CONFIG_LSM_MMAP_MIN_ADDR.

This allows users who need to disable the mmap_min_addr controls (usual reason
being they run WINE as a non-root user) to do so and still have SELinux
controls preventing confined domains (like a web server) from being able to
map some area of low memory.

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
2009-08-17 15:09:11 +10:00
..
2009-06-17 19:41:52 +02:00
2009-06-18 08:46:47 +10:00
2009-06-30 18:56:00 -07:00
2009-07-12 12:22:34 -07:00
2009-06-17 00:36:36 -04:00
2009-06-30 18:55:58 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2009-04-23 10:06:35 +01:00
2005-04-16 15:20:36 -07:00
2009-07-29 19:10:35 -07:00
2008-02-03 17:45:46 +02:00
2009-06-22 10:12:35 +01:00
2009-07-12 12:22:34 -07:00
2008-12-25 11:01:43 +11:00
2009-06-11 21:36:06 -04:00
2009-07-12 13:02:10 -07:00
2008-04-25 13:26:55 +01:00
2009-06-22 10:12:30 +01:00
2009-06-22 10:12:35 +01:00
2009-06-17 09:33:49 -07:00
2009-07-08 09:18:05 -07:00
2009-03-16 08:32:27 -06:00
2008-08-20 13:19:51 -07:00
2009-06-24 08:17:04 -04:00
2006-03-31 12:18:54 -08:00
2008-12-29 11:27:46 +02:00
2009-06-30 18:56:00 -07:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2009-08-07 14:38:29 -03:00
2009-06-18 18:40:18 -04:00
2009-06-30 20:12:24 +02:00
2009-06-18 13:04:05 -07:00
2007-07-10 00:35:17 -04:00
2009-07-12 12:22:34 -07:00
2009-01-30 23:51:17 +05:30
2007-03-16 00:59:29 -04:00
2008-08-08 15:13:27 +01:00
2009-04-02 19:04:53 -07:00
2009-01-30 23:52:16 +05:30
2008-06-11 21:00:38 -07:00
2005-04-16 15:20:36 -07:00
2009-06-29 08:59:10 +10:00
2009-06-18 13:03:57 -07:00
2006-10-10 15:37:22 -07:00
2009-07-31 08:55:48 +02:00
2009-06-18 13:03:56 -07:00
2009-01-30 23:59:44 +05:30
2009-01-31 00:00:06 +05:30
2009-01-05 08:40:30 -08:00
2009-06-22 10:12:35 +01:00
2009-06-10 11:48:39 +03:00
2009-06-23 20:21:39 +01:00
2009-07-30 16:03:45 +09:30
2009-07-28 21:07:09 -04:00
2007-07-17 10:23:03 -07:00
2009-06-16 19:47:57 -07:00
2005-04-16 15:20:36 -07:00
2008-04-29 08:06:01 -07:00
2007-05-09 12:30:49 -07:00
2009-01-31 00:00:35 +05:30
2009-06-16 19:50:13 -07:00
2009-07-08 09:31:56 -07:00
2009-06-18 13:03:57 -07:00
2009-06-11 21:36:01 -04:00
2005-04-16 15:20:36 -07:00
2009-06-17 18:02:11 -07:00
2009-06-17 18:02:11 -07:00
2007-05-09 12:30:54 -07:00
2009-06-17 12:24:34 -07:00
2009-08-12 08:21:39 -07:00
2009-06-17 12:24:34 -07:00
2009-06-17 18:02:11 -07:00
2007-10-16 09:43:02 -07:00
2009-04-01 08:59:13 -07:00
2009-06-29 12:14:51 -07:00
2009-06-30 18:55:59 -07:00
2005-04-16 15:20:36 -07:00
2009-03-13 16:09:12 -07:00
2009-06-18 13:04:04 -07:00
2009-07-29 19:10:36 -07:00
2007-10-19 11:53:41 -07:00
2009-03-30 15:22:01 +02:00
2009-03-26 02:18:35 +01:00
2009-07-12 12:22:34 -07:00
2009-01-31 00:05:59 +05:30
2009-06-24 08:17:06 -04:00
2007-10-16 09:43:17 -07:00
2009-04-08 14:33:38 -07:00
2009-06-24 08:17:06 -04:00
2005-04-16 15:20:36 -07:00
2008-06-20 14:05:53 -06:00
2009-04-27 02:45:02 -07:00
2009-03-27 12:18:56 -04:00
2005-04-16 15:20:36 -07:00
2008-01-30 13:31:20 +01:00
2007-05-08 11:15:18 -07:00
2006-10-01 00:39:18 -07:00
2009-06-23 12:50:05 -07:00
2009-07-06 13:57:03 -07:00
2009-02-18 15:37:53 -08:00
2006-03-31 12:18:56 -08:00
2009-07-12 15:16:39 -07:00