forge/linux-pinenote
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Smack: implement revoking all rules for a subject label

Browse source 
Add /smack/revoke-subject special file. Writing a SMACK label to this file will
set the access to '-' for all access rules with that subject label.

Targeted for git://git.gitorious.org/smack-next/kernel.git

Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
This commit is contained in:
Rafal Krypa 2012-07-11 17:49:30 +02:00 • committed by Casey Schaufler
parent c00bedb368
commit 449543b043
2 changed files with 78 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Documentation/security/Smack.txt
View file

@ -194,6 +194,9 @@ onlycap
these capabilities are effective at for processes with any
label. The value is set by writing the desired label to the
file or cleared by writing "-" to the file.
revoke-subject
Writing a Smack label here sets the access to '-' for all access
rules with that subject label.
You can add access rules in /etc/smack/accesses. They take the form: