Eric Paris f850a7c040 IMA: remove read permissions on the ima policy file ...

The IMA policy file does not implement read.  Trying to just open/read/close
the file will load a blank policy and you cannot then change the policy
without a reboot.  This removes the read permission from the file so one must
at least be attempting to write...

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>

2009-05-15 09:55:41 +10:00

..

integrity/ima

IMA: remove read permissions on the ima policy file

2009-05-15 09:55:41 +10:00

keys

keys: Handle there being no fallback destination keyring for request_key()

2009-04-09 10:41:19 -07:00

selinux

Merge branch 'master' into next

2009-05-08 17:56:47 +10:00

smack

Merge branch 'master' into next

2009-05-08 17:56:47 +10:00

tomoyo

tomoyo: version bump to 2.2.0.

2009-04-14 09:15:02 +10:00

capability.c

lsm: Remove the socket_post_accept() hook

2009-03-28 15:01:37 +11:00

commoncap.c

Merge branch 'master' into next

2009-05-08 17:56:47 +10:00

device_cgroup.c

devcgroup: avoid using cgroup_lock

2009-04-02 19:04:55 -07:00

inode.c

securityfs: securityfs_remove should handle IS_ERR pointers

2009-05-12 11:06:11 +10:00

Kconfig

Kconfig and Makefile

2009-02-12 15:19:00 +11:00

lsm_audit.c

smack: implement logging V3

2009-04-14 09:00:19 +10:00

Makefile

smack: implement logging V3

2009-04-14 09:00:23 +10:00

root_plug.c

Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]"

2009-01-07 09:21:54 +11:00

security.c

CacheFiles: Export things for CacheFiles

2009-04-03 16:42:40 +01:00