Rafal Krypa c0d77c8844 Smack: allow multiple labels in onlycap ... Smack onlycap allows limiting of CAP_MAC_ADMIN and CAP_MAC_OVERRIDE to processes running with the configured label. But having single privileged label is not enough in some real use cases. On a complex system like Tizen, there maybe few programs that need to configure Smack policy in run-time and running them all with a single label is not always practical. This patch extends onlycap feature for multiple labels. They are configured in the same smackfs "onlycap" interface, separated by spaces. Signed-off-by: Rafal Krypa <r.krypa@samsung.com>		2015-06-02 11:53:42 -07:00
..
Kconfig
Makefile
smack_access.c	Smack: allow multiple labels in onlycap	2015-06-02 11:53:42 -07:00
smack_lsm.c	smack: pass error code through pointers	2015-05-15 08:36:03 -07:00
smack_netfilter.c
smack.h	Smack: allow multiple labels in onlycap	2015-06-02 11:53:42 -07:00
smackfs.c	Smack: allow multiple labels in onlycap	2015-06-02 11:53:42 -07:00