CHROMIUM: security: Yama: add link restrictions
authorKees Cook <keescook@chromium.org>
Wed, 30 Nov 2011 22:20:13 +0000 (14:20 -0800)
committerGrant Grundler <grundler@google.com>
Thu, 24 May 2012 22:16:44 +0000 (15:16 -0700)
commit4630b09f9d362feda0448340a142714ab4ac80aa
treee6421ca48522d26034bdac25b8d8f89fa6bb4f98
parent3a6174a859a0349a13cbd57ec75ac1c4181a16ce
CHROMIUM: security: Yama: add link restrictions

Add symlink and hardlink restrictions that have shown real-world security
benefits, along with sysctl knobs to control them.

BUG=chromium-os:22137
TEST=x86-alex build, boot, suite_Smoke passes, logging_UserCrash passes,
 security_SymlinkRestrictions, security_HardlinkRestrictions,
 security_ptraceRestriction.

Change-Id: I983e711f2f7c74b2f30d632b9fea4761637523e9
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-on: https://gerrit.chromium.org/gerrit/12407
Reviewed-by: Olof Johansson <olofj@chromium.org>
[ 3.4-rc5: added many #include to fix missing types --grundler]
Documentation/security/Yama.txt
include/linux/pid_namespace.h
include/linux/security.h
kernel/pid.c
kernel/pid_namespace.c
security/security.c
security/yama/Kconfig
security/yama/yama_lsm.c