diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2006-02-01 03:05:54 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@g5.osdl.org> | 2006-02-01 08:53:18 -0800 |
| commit | db4c9641def55d36a6f9df79deb8a949292313ca (patch) | |
| tree | f3b786a346f0c987d796784e1e08154338263ad3 /security/commoncap.c | |
| parent | ee13d785eac1fbe7e79ecca77bf7e902734a0b30 (diff) | |
[PATCH] selinux: fix and cleanup mprotect checks
Fix the SELinux mprotect checks on executable mappings so that they are not
re-applied when the mapping is already executable as well as cleaning up
the code. This avoids a situation where e.g. an application is prevented
from removing PROT_WRITE on an already executable mapping previously
authorized via execmem permission due to an execmod denial.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Diffstat (limited to 'security/commoncap.c')
0 files changed, 0 insertions, 0 deletions