-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
yaml --- r: 283247 b: refs/heads/master c: 4e2c5b2 h: refs/heads/master i: 283245: 9391bea 283243: d56281d 283239: 2acf5b1 283231: a148569 v: v3
- Loading branch information
James Morris
committed
Nov 18, 2011
1 parent
c4d6bc1
commit 7ece467
Showing
338 changed files
with
3,956 additions
and
3,267 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,2 +1,2 @@ | ||
--- | ||
refs/heads/master: 15647eb3985ef30dfd657038924dc85c03026733 | ||
refs/heads/master: 4e2c5b28f8086cd2f678ade0ea21d8c3cc058c53 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,34 @@ | ||
Linux Security Module framework | ||
------------------------------- | ||
|
||
The Linux Security Module (LSM) framework provides a mechanism for | ||
various security checks to be hooked by new kernel extensions. The name | ||
"module" is a bit of a misnomer since these extensions are not actually | ||
loadable kernel modules. Instead, they are selectable at build-time via | ||
CONFIG_DEFAULT_SECURITY and can be overridden at boot-time via the | ||
"security=..." kernel command line argument, in the case where multiple | ||
LSMs were built into a given kernel. | ||
|
||
The primary users of the LSM interface are Mandatory Access Control | ||
(MAC) extensions which provide a comprehensive security policy. Examples | ||
include SELinux, Smack, Tomoyo, and AppArmor. In addition to the larger | ||
MAC extensions, other extensions can be built using the LSM to provide | ||
specific changes to system operation when these tweaks are not available | ||
in the core functionality of Linux itself. | ||
|
||
Without a specific LSM built into the kernel, the default LSM will be the | ||
Linux capabilities system. Most LSMs choose to extend the capabilities | ||
system, building their checks on top of the defined capability hooks. | ||
For more details on capabilities, see capabilities(7) in the Linux | ||
man-pages project. | ||
|
||
Based on http://kerneltrap.org/Linux/Documenting_Security_Module_Intent, | ||
a new LSM is accepted into the kernel when its intent (a description of | ||
what it tries to protect against and in what cases one would expect to | ||
use it) has been appropriately documented in Documentation/security/. | ||
This allows an LSM's code to be easily compared to its goals, and so | ||
that end users and distros can make a more informed decision about which | ||
LSMs suit their requirements. | ||
|
||
For extensive documentation on the available LSM hook interfaces, please | ||
see include/linux/security.h. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.