Mimi Zohar 4351c294b8 ima: extend "mask" policy matching support ... The current "mask" policy option matches files opened as MAY_READ, MAY_WRITE, MAY_APPEND or MAY_EXEC. This patch extends the "mask" option to match files opened containing one of these modes. For example, "mask=^MAY_READ" would match files opened read-write. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Signed-off-by: Dr. Greg Wettstein <gw@idfusion.org> Cc: stable@vger.kernel.org		2015-06-16 08:18:44 -04:00
..
apparmor	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
integrity	ima: extend "mask" policy matching support	2015-06-16 08:18:44 -04:00
keys	switch keyctl_instantiate_key_common() to iov_iter	2015-04-11 22:27:12 -04:00
selinux	selinux: fix setting of security labels on NFS	2015-06-05 14:21:48 -04:00
smack	Smack: freeing an error pointer in smk_write_revoke_subj()	2015-06-12 11:59:11 -07:00
tomoyo	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
yama	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
Kconfig	kernel: conditionally support non-root users, groups and capabilities	2015-04-15 16:35:22 -07:00
Makefile	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
commoncap.c	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
device_cgroup.c	cgroup: rename cgroup_subsys->base_cftypes to ->legacy_cftypes	2014-07-15 11:05:09 -04:00
inode.c	VFS: security/: d_inode() annotations	2015-04-15 15:06:57 -04:00
lsm_audit.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-04-26 17:22:07 -07:00
min_addr.c	mmap_min_addr check CAP_SYS_RAWIO only for write	2010-04-23 08:56:31 +10:00
security.c	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00