Kees Cook ccbb6e1065 smack: Refactor to remove bprm_secureexec hook ... The Smack bprm_secureexec hook can be merged with the bprm_set_creds hook since it's dealing with the same information, and all of the details are finalized during the first call to the bprm_set_creds hook via prepare_binprm() (subsequent calls due to binfmt_script, etc, are ignored via bprm->called_set_creds). Here, the test can just happen at the end of the bprm_set_creds hook, and the bprm_secureexec hook can be dropped. Signed-off-by: Kees Cook <keescook@chromium.org> Acked-by: Serge Hallyn <serge@hallyn.com> Reviewed-by: James Morris <james.l.morris@oracle.com> Reviewed-by: Casey Schaufler <casey@schaufler-ca.com>		2017-08-01 12:03:07 -07:00
..
Kconfig	Smack: Signal delivery as an append operation	2016-09-08 13:22:56 -07:00
Makefile	Smack: Repair netfilter dependency	2015-01-23 10:08:19 -08:00
smack_access.c	Smack: Use cap_capable in privilege check	2017-06-01 09:27:21 -07:00
smack_lsm.c	smack: Refactor to remove bprm_secureexec hook	2017-08-01 12:03:07 -07:00
smack_netfilter.c	smack: use pernet operations for hook registration	2017-06-01 09:26:43 -07:00
smack.h	Smack: Use cap_capable in privilege check	2017-06-01 09:27:21 -07:00
smackfs.c	fs: constify tree_descr arrays passed to simple_fill_super()	2017-04-26 23:54:06 -04:00