David Quigley 746df9b59c Security: Add Hook to test if the particular xattr is part of a MAC model. ... The interface to request security labels from user space is the xattr interface. When requesting the security label from an NFS server it is important to make sure the requested xattr actually is a MAC label. This allows us to make sure that we get the desired semantics from the attribute instead of something else such as capabilities or a time based LSM. Acked-by: Eric Paris <eparis@redhat.com> Acked-by: James Morris <james.l.morris@oracle.com> Signed-off-by: Matthew N. Dodd <Matthew.Dodd@sparta.com> Signed-off-by: Miguel Rodel Felipe <Rodel_FM@dsi.a-star.edu.sg> Signed-off-by: Phua Eu Gene <PHUA_Eu_Gene@dsi.a-star.edu.sg> Signed-off-by: Khin Mi Mi Aung <Mi_Mi_AUNG@dsi.a-star.edu.sg> Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>		2013-06-08 16:20:11 -04:00
..
apparmor	new helper: file_inode(file)	2013-02-22 23:31:31 -05:00
integrity	ima: eliminate passing d_name.name to process_measurement()	2013-04-17 17:20:57 -07:00
keys	aio: don't include aio.h in sched.h	2013-05-07 20:16:25 -07:00
selinux	Security: Add Hook to test if the particular xattr is part of a MAC model.	2013-06-08 16:20:11 -04:00
smack	Security: Add Hook to test if the particular xattr is part of a MAC model.	2013-06-08 16:20:11 -04:00
tomoyo	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
yama	yama: Better permission check for ptraceme	2013-03-26 13:17:58 -07:00
capability.c	Security: Add Hook to test if the particular xattr is part of a MAC model.	2013-06-08 16:20:11 -04:00
commoncap.c	kill f_vfsmnt	2013-02-26 02:46:10 -05:00
device_cgroup.c	devcg: remove parent_cgroup.	2013-04-18 11:34:35 -07:00
inode.c
Kconfig
lsm_audit.c
Makefile
min_addr.c
security.c	Security: Add Hook to test if the particular xattr is part of a MAC model.	2013-06-08 16:20:11 -04:00