From: Tetsuo Handa Date: Sat, 10 Sep 2011 06:25:58 +0000 (+0900) Subject: TOMOYO: Allow domain transition without execve(). X-Git-Tag: v3.2-rc1~190^2~23 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=731d37aa70c7b9de3be6bf2c8287366223bf5ce5;p=pandora-kernel.git TOMOYO: Allow domain transition without execve(). To be able to split permissions for Apache's CGI programs which are executed without execve(), add special domain transition which is performed by writing a TOMOYO's domainname to /sys/kernel/security/tomoyo/self_domain interface. This is an API for TOMOYO-aware userland applications. However, since I expect TOMOYO and other LSM modules to run in parallel, this patch does not use /proc/self/attr/ interface in order to avoid conflicts with other LSM modules when it became possible to run multiple LSM modules in parallel. Signed-off-by: Tetsuo Handa Signed-off-by: James Morris --- Reading git-diff-tree failed