From: Rafal Krypa Date: Tue, 2 Jun 2015 09:23:48 +0000 (+0200) Subject: Smack: allow multiple labels in onlycap X-Git-Tag: omap-for-v4.2/fixes-rc1^2~81^2~12^2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c0d77c884461fc0dec0411e49797dc3f3651c31b;p=pandora-kernel.git Smack: allow multiple labels in onlycap Smack onlycap allows limiting of CAP_MAC_ADMIN and CAP_MAC_OVERRIDE to processes running with the configured label. But having single privileged label is not enough in some real use cases. On a complex system like Tizen, there maybe few programs that need to configure Smack policy in run-time and running them all with a single label is not always practical. This patch extends onlycap feature for multiple labels. They are configured in the same smackfs "onlycap" interface, separated by spaces. Signed-off-by: Rafal Krypa --- Reading git-diff-tree failed