26 |
arch/x86_64/kernel/ptrace.c | 7 +++ |
arch/x86_64/kernel/ptrace.c | 7 +++ |
27 |
fs/Config.in | 3 + |
fs/Config.in | 3 + |
28 |
fs/Makefile | 2 - |
fs/Makefile | 2 - |
29 |
fs/attr.c | 10 +++++ |
fs/attr.c | 8 ++++ |
30 |
fs/exec.c | 18 ++++++++- |
fs/exec.c | 18 ++++++++- |
31 |
fs/fcntl.c | 8 ++++ |
fs/fcntl.c | 8 ++++ |
32 |
fs/ioctl.c | 16 ++++++++ |
fs/ioctl.c | 16 ++++++++ |
51 |
net/ipv6/udp.c | 19 +++++++++ |
net/ipv6/udp.c | 19 +++++++++ |
52 |
net/socket.c | 40 +++++++++++++++++++- |
net/socket.c | 40 +++++++++++++++++++- |
53 |
net/unix/af_unix.c | 8 ++++ |
net/unix/af_unix.c | 8 ++++ |
54 |
49 files changed, 687 insertions(+), 6 deletions(-) |
49 files changed, 685 insertions(+), 6 deletions(-) |
55 |
|
|
56 |
--- linux-2.4.37.3.orig/Documentation/Configure.help |
--- linux-2.4.37.3.orig/Documentation/Configure.help |
57 |
+++ linux-2.4.37.3/Documentation/Configure.help |
+++ linux-2.4.37.3/Documentation/Configure.help |
677 |
|
|
678 |
/* Taken over from the old code... */ |
/* Taken over from the old code... */ |
679 |
|
|
680 |
@@ -127,6 +130,13 @@ int notify_change(struct dentry * dentry |
@@ -127,6 +130,11 @@ int notify_change(struct dentry * dentry |
681 |
attr->ia_atime = now; |
attr->ia_atime = now; |
682 |
if (!(ia_valid & ATTR_MTIME_SET)) |
if (!(ia_valid & ATTR_MTIME_SET)) |
683 |
attr->ia_mtime = now; |
attr->ia_mtime = now; |
684 |
+ /***** TOMOYO Linux start. *****/ |
+ /***** TOMOYO Linux start. *****/ |
685 |
+ if ((ia_valid & ATTR_MODE) && !ccs_capable(CCS_SYS_CHMOD)) |
+ error = ccs_check_setattr_permission(dentry, attr); |
686 |
+ return -EPERM; |
+ if (error) |
687 |
+ if ((ia_valid & (ATTR_UID | ATTR_GID)) && |
+ return error; |
|
+ !ccs_capable(CCS_SYS_CHOWN)) |
|
|
+ return -EPERM; |
|
688 |
+ /***** TOMOYO Linux end. *****/ |
+ /***** TOMOYO Linux end. *****/ |
689 |
|
|
690 |
lock_kernel(); |
lock_kernel(); |