Re: [PATCH] Smack: UDS revision

[James Morris]

On Wed, 24 Nov 2010, Casey Schaufler wrote:

> 
> Subject: [PATCH] Smack: UDS revision
> 
>     This patch addresses a number of long standing issues
>     with the way Smack treats UNIX domain sockets.
>     
>     All access control was being done based on the label of
>     the file system object. This is inconsistant with the
>     internet domain, in which access is done based on the
>     IPIN and IPOUT attributes of the socket. As a result
>     of the inode label policy it was not possible to use
>     a UDS socket for label cognizant services, including
>     dbus and the X11 server.
>     
>     Support for SCM_PEERSEC on UDS sockets is also provided.
> 
> Signed-off-by: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>

(I'm guessing you wanted me to apply this).

Applied to
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6#next

-- 
James Morris
<jmorris@xxxxxxxxx>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/