security/tomoyo: Add a special case to handle accesses through the internal proc...
authorEric W. Biederman <ebiederm@xmission.com>
Fri, 20 Nov 2009 17:12:22 +0000 (09:12 -0800)
committerEric W. Biederman <ebiederm@xmission.com>
Fri, 20 Nov 2009 17:23:22 +0000 (09:23 -0800)
commita4054b6b20e9c2cca63715a319759bf8d37d82fc
treec7d17dda2b79fbc4faacd88514b01f49c3c05169
parent6d4561110a3e9fa742aeec6717248a491dfb1878
security/tomoyo: Add a special case to handle accesses through the internal proc mount.

With the change of sys_sysctl going through the internal proc mount we no
longer need to handle security_sysctl in tomoyo as we have valid pathnames
for all sysctl accesses.  There is one slight caveat to that in that
all of the paths from the internal mount look like
"/sys/net/ipv4/ip_local_port_range" instead of
"/proc/sys/net/ipv4/ip_local_port_range" so tomoyo needs to add the
"/proc" portion manually when resolving to full path names to get what it expects.

This change teaches tomoyo perform that modification.

Acked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Acked-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
security/tomoyo/realpath.c