]> err.no Git - linux-2.6/commit
[PATCH] SELinux: add security hook call to mediate attach_task (kernel/cpuset.c)
authorDavid Quigley <dpquigl@tycho.nsa.gov>
Fri, 23 Jun 2006 09:04:00 +0000 (02:04 -0700)
committerLinus Torvalds <torvalds@g5.osdl.org>
Fri, 23 Jun 2006 14:42:54 +0000 (07:42 -0700)
commit22fb52dd736a62e24c44c50739007496265dc38c
tree06cc6dcff21df6e18f189c6895cf6aa313e7a8ea
parente7834f8fccd791225a1cf91c2c3e740ad8e2e145
[PATCH] SELinux: add security hook call to mediate attach_task (kernel/cpuset.c)

Add a security hook call to enable security modules to control the ability
to attach a task to a cpuset.  While limited control over this operation is
possible via permission checks on the pseudo fs interface, those checks are
not sufficient to control access to the target task, which is looked up in
this function.  The existing task_setscheduler hook is re-used for this
operation since this falls under the same class of operations.

Signed-off-by: David Quigley <dpquigl@tycho.nsa.gov>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
Acked-by: Paul Jackson <pj@sgi.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
kernel/cpuset.c