linux/include
James Morris 20510f2f4e security: Convert LSM into a static interface
Convert LSM into a static interface, as the ability to unload a security
module is not required by in-tree users and potentially complicates the
overall security architecture.

Needlessly exported LSM symbols have been unexported, to help reduce API
abuse.

Parameters for the capability and root_plug modules are now specified
at boot.

The SECURITY_FRAMEWORK_VERSION macro has also been removed.

In a nutshell, there is no safe way to unload an LSM.  The modular interface
is thus unecessary and broken infrastructure.  It is used only by out-of-tree
modules, which are often binary-only, illegal, abusive of the API and
dangerous, e.g.  silently re-vectoring SELinux.

[akpm@linux-foundation.org: cleanups]
[akpm@linux-foundation.org: USB Kconfig fix]
[randy.dunlap@oracle.com: fix LSM kernel-doc]
Signed-off-by: James Morris <jmorris@namei.org>
Acked-by: Chris Wright <chrisw@sous-sol.org>
Cc: Stephen Smalley <sds@tycho.nsa.gov>
Cc: "Serge E. Hallyn" <serue@us.ibm.com>
Acked-by: Arjan van de Ven <arjan@infradead.org>
Signed-off-by: Randy Dunlap <randy.dunlap@oracle.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-10-17 08:43:07 -07:00
..
acpi ACPI: CONFIG_ACPI_SLEEP=n power off regression in 2.6.23-rc8 (NOT in rc7) 2007-09-25 17:58:52 -04:00
asm-alpha increase AT_VECTOR_SIZE to terminate saved_auxv properly 2007-10-17 08:43:00 -07:00
asm-arm remove include/asm-*/ipc.h 2007-10-17 08:42:55 -07:00
asm-arm26 softlockup: make asm/irq_regs.h available on every platform 2007-10-17 08:42:47 -07:00
asm-avr32 Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-blackfin Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-cris remove include/asm-*/ipc.h 2007-10-17 08:42:55 -07:00
asm-frv remove include/asm-*/ipc.h 2007-10-17 08:42:55 -07:00
asm-generic remove include/asm-*/ipc.h 2007-10-17 08:42:55 -07:00
asm-h8300 Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-ia64 increase AT_VECTOR_SIZE to terminate saved_auxv properly 2007-10-17 08:43:00 -07:00
asm-m32r remove include/asm-*/ipc.h 2007-10-17 08:42:55 -07:00
asm-m68k Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-m68knommu Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-mips Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-parisc Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-powerpc increase AT_VECTOR_SIZE to terminate saved_auxv properly 2007-10-17 08:43:00 -07:00
asm-ppc Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-s390 remove include/asm-*/ipc.h 2007-10-17 08:42:55 -07:00
asm-sh increase AT_VECTOR_SIZE to terminate saved_auxv properly 2007-10-17 08:43:00 -07:00
asm-sh64 Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-sparc Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-sparc64 Remove dma_cache_(wback|inv|wback_inv) functions 2007-10-17 08:42:57 -07:00
asm-um remove include/asm-*/ipc.h 2007-10-17 08:42:55 -07:00
asm-v850 remove include/asm-*/ipc.h 2007-10-17 08:42:55 -07:00
asm-x86 increase AT_VECTOR_SIZE to terminate saved_auxv properly 2007-10-17 08:43:00 -07:00
asm-xtensa remove strict ansi check from __u64 in asm/types.h 2007-10-17 08:42:53 -07:00
crypto [CRYPTO] sha: Add header file for SHA definitions 2007-10-10 16:55:50 -07:00
keys KEYS: Make request_key() and co fundamentally asynchronous 2007-10-17 08:42:57 -07:00
linux security: Convert LSM into a static interface 2007-10-17 08:43:07 -07:00
math-emu Fix <math-emu/soft-fp.h> tpyo 2007-08-18 17:15:17 -07:00
media v4l: copy_to_user() is not a good method name 2007-10-13 09:58:59 -07:00
mtd
net [IPV6]: Replace sk_buff ** with sk_buff * in input handlers 2007-10-15 12:50:28 -07:00
pcmcia pcmcia: use DMA_MASK_NONE for the default for all pcmcia devices 2007-10-16 09:42:50 -07:00
rdma IB/cm: Modify interface to send MRAs in response to duplicate messages 2007-10-09 19:59:17 -07:00
rxrpc
scsi do not export /usr/include/scsi in make headers_install 2007-10-17 08:42:52 -07:00
sound [ALSA] version 1.0.15 2007-10-16 16:57:46 +02:00
video pm2fb: hardware cursor support for the Permedia2 2007-10-16 09:43:18 -07:00
xen xen: xen/page.h compile fix 2007-07-26 11:35:16 -07:00
Kbuild do not export /usr/include/scsi in make headers_install 2007-10-17 08:42:52 -07:00