Re: [PATCH 3/3] Smack: adds smackfs/ptrace interface

2014-04-11 Thread Casey Schaufler
On 3/11/2014 9:07 AM, Lukasz Pawelczyk wrote: > This allows to limit ptrace beyond the regular smack access rules. > It adds a smackfs/ptrace interface that allows smack to be configured > to require equal smack labels for PTRACE_MODE_ATTACH access. > See the changes in Documentation/security/Smack

[PATCH 3/3] Smack: adds smackfs/ptrace interface

2014-03-11 Thread Lukasz Pawelczyk
This allows to limit ptrace beyond the regular smack access rules. It adds a smackfs/ptrace interface that allows smack to be configured to require equal smack labels for PTRACE_MODE_ATTACH access. See the changes in Documentation/security/Smack.txt below for details. Signed-off-by: Lukasz Pawelcz