SECURITY: Move exec_permission RCU checks into security modules
authorAndi Kleen <ak@linux.intel.com>
Fri, 22 Apr 2011 00:23:19 +0000 (17:23 -0700)
committerEric Paris <eparis@redhat.com>
Mon, 25 Apr 2011 14:20:32 +0000 (10:20 -0400)
commit1c9904297451f558191e211a48d8838b4bf792b0
tree9c7cabec6ce3d6604147de73953cfaca672f1c0d
parent6b697323a78bed254ee372f71b1a6a2901bb4b7a
SECURITY: Move exec_permission RCU checks into security modules

Right now all RCU walks fall back to reference walk when CONFIG_SECURITY
is enabled, even though just the standard capability module is active.
This is because security_inode_exec_permission unconditionally fails
RCU walks.

Move this decision to the low level security module. This requires
passing the RCU flags down the security hook. This way at least
the capability module and a few easy cases in selinux/smack work
with RCU walks with CONFIG_SECURITY=y

Signed-off-by: Andi Kleen <ak@linux.intel.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
include/linux/security.h
security/capability.c
security/security.c
security/selinux/hooks.c
security/smack/smack_lsm.c