Rafal Krypa c0d77c8844 Smack: allow multiple labels in onlycap ... Smack onlycap allows limiting of CAP_MAC_ADMIN and CAP_MAC_OVERRIDE to processes running with the configured label. But having single privileged label is not enough in some real use cases. On a complex system like Tizen, there maybe few programs that need to configure Smack policy in run-time and running them all with a single label is not always practical. This patch extends onlycap feature for multiple labels. They are configured in the same smackfs "onlycap" interface, separated by spaces. Signed-off-by: Rafal Krypa <r.krypa@samsung.com>		2015-06-02 11:53:42 -07:00
..
Kconfig	Smack: secmark support for netfilter	2015-01-20 16:34:25 -08:00
Makefile	Smack: Repair netfilter dependency	2015-01-23 10:08:19 -08:00
smack_access.c	Smack: allow multiple labels in onlycap	2015-06-02 11:53:42 -07:00
smack_lsm.c	smack: pass error code through pointers	2015-05-15 08:36:03 -07:00
smack_netfilter.c	netfilter: Make nf_hookfn use nf_hook_state.	2015-04-04 12:31:38 -04:00
smack.h	Smack: allow multiple labels in onlycap	2015-06-02 11:53:42 -07:00
smackfs.c	Smack: allow multiple labels in onlycap	2015-06-02 11:53:42 -07:00