kernel_optimize_test/security/selinux
Eric Paris 64dbf07474 selinux: introduce permissive types
Introduce the concept of a permissive type.  A new ebitmap is introduced to
the policy database which indicates if a given type has the permissive bit
set or not.  This bit is tested for the scontext of any denial.  The bit is
meaningless on types which only appear as the target of a decision and never
the source.  A domain running with a permissive type will be allowed to
perform any action similarly to when the system is globally set permissive.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
2008-04-18 20:26:11 +10:00
..
include selinux: introduce permissive types 2008-04-18 20:26:11 +10:00
ss selinux: introduce permissive types 2008-04-18 20:26:11 +10:00
avc.c selinux: introduce permissive types 2008-04-18 20:26:11 +10:00
exports.c SELinux: Enable dynamic enable/disable of the network access checks 2008-01-30 08:17:26 +11:00
hooks.c selinux: remove ptrace_sid 2008-04-18 20:26:10 +10:00
Kconfig selinux: introduce permissive types 2008-04-18 20:26:11 +10:00
Makefile SELinux: Add a network node caching mechanism similar to the sel_netif_*() functions 2008-01-30 08:17:23 +11:00
netif.c SELinux: Add warning messages on network denial due to error 2008-01-30 08:17:30 +11:00
netlabel.c selinux: selinux/netlabel.c should #include "netlabel.h" 2008-04-18 20:26:06 +10:00
netlink.c security: replace remaining __FUNCTION__ occurrences 2008-04-18 20:26:07 +10:00
netnode.c SELinux: Add warning messages on network denial due to error 2008-01-30 08:17:30 +11:00
nlmsgtab.c Audit: add TTY input auditing 2007-07-16 09:05:47 -07:00
selinuxfs.c security: replace remaining __FUNCTION__ occurrences 2008-04-18 20:26:07 +10:00
xfrm.c SELinux: Enable dynamic enable/disable of the network access checks 2008-01-30 08:17:26 +11:00