OSDN Git Service

apparmor: add special .null file used to "close" fds at exec
authorJohn Johansen <john.johansen@canonical.com>
Mon, 16 Jan 2017 08:42:45 +0000 (00:42 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Mon, 16 Jan 2017 09:18:35 +0000 (01:18 -0800)
commita71ada305801e940ff69c2c58489778760e5148b
tree4fc18f426bff2471c50b87c5b5c6df4749deee11
parent34c426acb75cc21bdf84685e106db0c1a3565057
apparmor: add special .null file used to "close" fds at exec

Borrow the special null device file from selinux to "close" fds that
don't have sufficient permissions at exec time.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/apparmorfs.c
security/apparmor/include/apparmorfs.h
security/apparmor/include/policy_ns.h