Diff of /branches/ccs-patch/security/ccsecurity/policy_io.c

TOMOYO

 Subversion リポジトリの参照



/[tomoyo]/branches/ccs-patch/security/ccsecurity/policy_io.c




Diff of /branches/ccs-patch/security/ccsecurity/policy_io.c



 Parent Directory

|  Revision Log



|  Patch














revision 3843 by kumaneko,
Sat Jul 24 07:38:52 2010 UTC




revision 3853 by kumaneko,
Mon Jul 26 03:42:20 2010 UTC






#

Line 135 
 static const char *ccs_mac_keywords[CCS_


Line 135 
 static const char *ccs_mac_keywords[CCS_












135
         = "capability::use_route",
         = "capability::use_route",

















136
         [CCS_MAX_MAC_INDEX + CCS_USE_PACKET_SOCKET]
         [CCS_MAX_MAC_INDEX + CCS_USE_PACKET_SOCKET]

















137
         = "capability::use_packet",
         = "capability::use_packet",














         [CCS_MAX_MAC_INDEX + CCS_SYS_MOUNT]
 










         = "capability::SYS_MOUNT",
 










         [CCS_MAX_MAC_INDEX + CCS_SYS_UMOUNT]
 










         = "capability::SYS_UMOUNT",
 













138
         [CCS_MAX_MAC_INDEX + CCS_SYS_REBOOT]
         [CCS_MAX_MAC_INDEX + CCS_SYS_REBOOT]

















139
         = "capability::SYS_REBOOT",
         = "capability::SYS_REBOOT",














         [CCS_MAX_MAC_INDEX + CCS_SYS_CHROOT]
 










         = "capability::SYS_CHROOT",
 










         [CCS_MAX_MAC_INDEX + CCS_SYS_KILL]
 










         = "capability::SYS_KILL",
 













140
         [CCS_MAX_MAC_INDEX + CCS_SYS_VHANGUP]
         [CCS_MAX_MAC_INDEX + CCS_SYS_VHANGUP]

















141
         = "capability::SYS_VHANGUP",
         = "capability::SYS_VHANGUP",

















142
         [CCS_MAX_MAC_INDEX + CCS_SYS_SETTIME]
         [CCS_MAX_MAC_INDEX + CCS_SYS_SETTIME]











#

Line 163 
 static const char *ccs_mac_keywords[CCS_


Line 155 
 static const char *ccs_mac_keywords[CCS_












155
         = "capability::create_char_dev",
         = "capability::create_char_dev",

















156
         [CCS_MAX_MAC_INDEX + CCS_CREATE_UNIX_SOCKET]
         [CCS_MAX_MAC_INDEX + CCS_CREATE_UNIX_SOCKET]

















157
         = "capability::create_unix_socket",
         = "capability::create_unix_socket",














         [CCS_MAX_MAC_INDEX + CCS_SYS_LINK]
 










         = "capability::SYS_LINK",
 










         [CCS_MAX_MAC_INDEX + CCS_SYS_SYMLINK]
 










         = "capability::SYS_SYMLINK",
 










         [CCS_MAX_MAC_INDEX + CCS_SYS_RENAME]
 










         = "capability::SYS_RENAME",
 










         [CCS_MAX_MAC_INDEX + CCS_SYS_UNLINK]
 










         = "capability::SYS_UNLINK",
 










         [CCS_MAX_MAC_INDEX + CCS_SYS_CHMOD]
 










         = "capability::SYS_CHMOD",
 










         [CCS_MAX_MAC_INDEX + CCS_SYS_CHOWN]
 










         = "capability::SYS_CHOWN",
 










         [CCS_MAX_MAC_INDEX + CCS_SYS_IOCTL]
 










         = "capability::SYS_IOCTL",
 













158
         [CCS_MAX_MAC_INDEX + CCS_SYS_KEXEC_LOAD]
         [CCS_MAX_MAC_INDEX + CCS_SYS_KEXEC_LOAD]

















159
         = "capability::SYS_KEXEC_LOAD",
         = "capability::SYS_KEXEC_LOAD",














         [CCS_MAX_MAC_INDEX + CCS_SYS_PIVOT_ROOT]
 










         = "capability::SYS_PIVOT_ROOT",
 













160
         [CCS_MAX_MAC_INDEX + CCS_SYS_PTRACE]
         [CCS_MAX_MAC_INDEX + CCS_SYS_PTRACE]

















161
         = "capability::SYS_PTRACE",
         = "capability::SYS_PTRACE",














         [CCS_MAX_MAC_INDEX + CCS_CONCEAL_MOUNT]
 










         = "capability::conceal_mount",
 













162
         [CCS_MAX_MAC_INDEX + CCS_MAX_CAPABILITY_INDEX
         [CCS_MAX_MAC_INDEX + CCS_MAX_CAPABILITY_INDEX

















163
          + CCS_MAC_CATEGORY_FILE] = "file",
          + CCS_MAC_CATEGORY_FILE] = "file",

















164
         [CCS_MAX_MAC_INDEX + CCS_MAX_CAPABILITY_INDEX
         [CCS_MAX_MAC_INDEX + CCS_MAX_CAPABILITY_INDEX





























Legend:



Removed from v.3843
 


changed lines


 
Added in v.3853













Back to OSDN">Back to OSDN
ViewVC Help


Powered by ViewVC 1.1.26
 /[tomoyo]/branches/ccs-patch/security/ccsecurity/policy_io.c
-revision 3843 by kumaneko,
Sat Jul 24 07:38:52 2010 UTC
+revision 3853 by kumaneko,
Mon Jul 26 03:42:20 2010 UTC
 Line 135 
 static const char *ccs_mac_keywords[CCS_
          = "capability::use_route",
          [CCS_MAX_MAC_INDEX + CCS_USE_PACKET_SOCKET]
          = "capability::use_packet",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_MOUNT]
-         = "capability::SYS_MOUNT",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_UMOUNT]
-         = "capability::SYS_UMOUNT",
          [CCS_MAX_MAC_INDEX + CCS_SYS_REBOOT]
          = "capability::SYS_REBOOT",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_CHROOT]
-         = "capability::SYS_CHROOT",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_KILL]
-         = "capability::SYS_KILL",
          [CCS_MAX_MAC_INDEX + CCS_SYS_VHANGUP]
          = "capability::SYS_VHANGUP",
          [CCS_MAX_MAC_INDEX + CCS_SYS_SETTIME]
-Line 163 
 static const char *ccs_mac_keywords[CCS_
+Line 155 
 static const char *ccs_mac_keywords[CCS_
          = "capability::create_char_dev",
          [CCS_MAX_MAC_INDEX + CCS_CREATE_UNIX_SOCKET]
          = "capability::create_unix_socket",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_LINK]
-         = "capability::SYS_LINK",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_SYMLINK]
-         = "capability::SYS_SYMLINK",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_RENAME]
-         = "capability::SYS_RENAME",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_UNLINK]
-         = "capability::SYS_UNLINK",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_CHMOD]
-         = "capability::SYS_CHMOD",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_CHOWN]
-         = "capability::SYS_CHOWN",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_IOCTL]
-         = "capability::SYS_IOCTL",
          [CCS_MAX_MAC_INDEX + CCS_SYS_KEXEC_LOAD]
          = "capability::SYS_KEXEC_LOAD",
-         [CCS_MAX_MAC_INDEX + CCS_SYS_PIVOT_ROOT]
-         = "capability::SYS_PIVOT_ROOT",
          [CCS_MAX_MAC_INDEX + CCS_SYS_PTRACE]
          = "capability::SYS_PTRACE",
-         [CCS_MAX_MAC_INDEX + CCS_CONCEAL_MOUNT]
-         = "capability::conceal_mount",
          [CCS_MAX_MAC_INDEX + CCS_MAX_CAPABILITY_INDEX
           + CCS_MAC_CATEGORY_FILE] = "file",
          [CCS_MAX_MAC_INDEX + CCS_MAX_CAPABILITY_INDEX
 Legend:



Removed from v.3843
 


changed lines


 
Added in v.3853
 Legend:



Removed from v.3843
 


changed lines


 
Added in v.3853
-Removed from v.3843
+Added in v.3853
-Back to OSDN">Back to OSDN
+ViewVC Help
 Powered by ViewVC 1.1.26

オープンソース・ソフトウェアの開発とダウンロード

TOMOYO

Subversion リポジトリの参照