Re: [PATCH][LSM/SELINUX] Pass requested protection to security_file_mmap/mprotect hooks

2005-03-08 Thread Stephen Smalley
On Mon, 2005-03-07 at 16:14 -0800, Andrew Morton wrote: > Stephen Smalley <[EMAIL PROTECTED]> wrote: > > > > +__setup("checkreqprot=", checkreqprot_setup); > > Can we have an update to Documentation/kernel-parameters.txt, please? Ok, how does the patch below look? Includes descriptions of the ot

Re: [PATCH][LSM/SELINUX] Pass requested protection to security_file_mmap/mprotect hooks

2005-03-07 Thread Andrew Morton
Stephen Smalley <[EMAIL PROTECTED]> wrote: > > +__setup("checkreqprot=", checkreqprot_setup); Can we have an update to Documentation/kernel-parameters.txt, please? - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo

[PATCH][LSM/SELINUX] Pass requested protection to security_file_mmap/mprotect hooks

2005-03-07 Thread Stephen Smalley
This patch adds a reqprot parameter to the security_file_mmap and security_file_mprotect hooks that is the original requested protection value prior to any modification for read-implies-exec, and changes the SELinux module to allow a mode of operation (controllable via a checkreqprot setting) where