Rafal Krypa c0d77c8844 Smack: allow multiple labels in onlycap ... Smack onlycap allows limiting of CAP_MAC_ADMIN and CAP_MAC_OVERRIDE to processes running with the configured label. But having single privileged label is not enough in some real use cases. On a complex system like Tizen, there maybe few programs that need to configure Smack policy in run-time and running them all with a single label is not always practical. This patch extends onlycap feature for multiple labels. They are configured in the same smackfs "onlycap" interface, separated by spaces. Signed-off-by: Rafal Krypa <r.krypa@samsung.com>		2015-06-02 11:53:42 -07:00
..
apparmor	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
integrity	VFS: security/: d_backing_inode() annotations	2015-04-15 15:06:56 -04:00
keys	switch keyctl_instantiate_key_common() to iov_iter	2015-04-11 22:27:12 -04:00
selinux	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
smack	Smack: allow multiple labels in onlycap	2015-06-02 11:53:42 -07:00
tomoyo	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
yama	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
commoncap.c	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
device_cgroup.c	cgroup: rename cgroup_subsys->base_cftypes to ->legacy_cftypes	2014-07-15 11:05:09 -04:00
inode.c	VFS: security/: d_inode() annotations	2015-04-15 15:06:57 -04:00
Kconfig	kernel: conditionally support non-root users, groups and capabilities	2015-04-15 16:35:22 -07:00
lsm_audit.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-04-26 17:22:07 -07:00
Makefile	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00
min_addr.c	mmap_min_addr check CAP_SYS_RAWIO only for write	2010-04-23 08:56:31 +10:00
security.c	LSM: Switch to lists of hooks	2015-05-12 15:00:41 +10:00