Re: [PATCH] smack lsm bug fixes

2014-04-11 Thread Casey Schaufler
On 2/20/2014 2:15 AM, Pankaj Kumar wrote: > From: Pankaj Kumar > > 1. In order to remove any SMACK extended attribute from a file, a user > should have CAP_MAC_ADMIN capability. But any user without this > capability is able to remove SMACK64MMAP security attribute. This error > has been

Re: [PATCH] smack lsm bug fixes

2014-04-11 Thread Casey Schaufler
On 2/20/2014 2:15 AM, Pankaj Kumar wrote: From: Pankaj Kumar pankaj...@samsung.com 1. In order to remove any SMACK extended attribute from a file, a user should have CAP_MAC_ADMIN capability. But any user without this capability is able to remove SMACK64MMAP security attribute. This error

[PATCH] smack lsm bug fixes

2014-02-20 Thread Pankaj Kumar
From: Pankaj Kumar 1. In order to remove any SMACK extended attribute from a file, a user should have CAP_MAC_ADMIN capability. But any user without this capability is able to remove SMACK64MMAP security attribute. This error has been corrected by a modification in smack_inode_removexattr hook.

[PATCH] smack lsm bug fixes

2014-02-20 Thread Pankaj Kumar
From: Pankaj Kumar pankaj...@samsung.com 1. In order to remove any SMACK extended attribute from a file, a user should have CAP_MAC_ADMIN capability. But any user without this capability is able to remove SMACK64MMAP security attribute. This error has been corrected by a modification in

[PATCH] smack lsm bug fixes

2014-02-16 Thread Pankaj Kumar
From 8fa425d071b7d4cfdf6bcb89d789138a13529d06 Mon Sep 17 00:00:00 2001 From: Pankaj Kumar Date: Mon, 17 Feb 2014 10:36:26 +0530 Subject: [PATCH] smack lsm bug fixes 1. In order to remove any SMACK extended attribute from a file, a user should have CAP_MAC_ADMIN capability. But any user without

[PATCH] smack lsm bug fixes

2014-02-16 Thread Pankaj Kumar
From 8fa425d071b7d4cfdf6bcb89d789138a13529d06 Mon Sep 17 00:00:00 2001 From: Pankaj Kumar pankaj...@samsung.com Date: Mon, 17 Feb 2014 10:36:26 +0530 Subject: [PATCH] smack lsm bug fixes 1. In order to remove any SMACK extended attribute from a file, a user should have CAP_MAC_ADMIN capability