xiaomi-sm8450/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security/tomoyo: Remove now unnecessary handling of security_sysctl.

Browse Source 
Now that sys_sysctl is an emulation on top of proc sys all sysctl
operations look like normal filesystem operations and we don't need
to use the special sysctl hook to authenticate them.

Acked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
This commit is contained in:
Eric W. Biederman
2009-11-20 09:24:19 -08:00
parent a4054b6b20
commit c656ae95d1
3 changed files with 0 additions and 95 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
security/tomoyo/file.c
View File

@@ -1095,27 +1095,6 @@ static int tomoyo_check_single_path_permission2(struct tomoyo_domain_info *
return error;
}
/**
* tomoyo_check_file_perm - Check permission for sysctl()'s "read" and "write".
*
* @domain: Pointer to "struct tomoyo_domain_info".
* @filename: Filename to check.
* @perm: Mode ("read" or "write" or "read/write").
* Returns 0 on success, negative value otherwise.
*/
int tomoyo_check_file_perm(struct tomoyo_domain_info *domain,
const char *filename, const u8 perm)
{
struct tomoyo_path_info name;
const u8 mode = tomoyo_check_flags(domain, TOMOYO_MAC_FOR_FILE);
if (!mode)
return 0;
name.name = filename;
tomoyo_fill_path_info(&name);
return tomoyo_check_file_perm2(domain, &name, perm, "sysctl", mode);
}
/**
* tomoyo_check_exec_perm - Check permission for "execute".
*