From: Eric Paris <eparis@redhat.com>
Date: Thu, 13 Aug 2009 13:45:03 +0000 (-0400)
Subject: SELinux: add selinux_kernel_module_request
X-Git-Tag: v2.6.32-rc1~737^2^2~28
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=25354c4fee169710fd9da15f3bb2abaa24dcf933;p=pandora-kernel.git

SELinux: add selinux_kernel_module_request

This patch adds a new selinux hook so SELinux can arbitrate if a given
process should be allowed to trigger a request for the kernel to try to
load a module.  This is a different operation than a process trying to load
a module itself, which is already protected by CAP_SYS_MODULE.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
---

Reading git-diff-tree failed