Subversion リポジトリの参照
Diff of /trunk/1.7.x/ccs-patch/README.ccs
 Parent Directory
|  Revision Log
|  Patch
| 971 |
@ Move external policy loader from /.init to /sbin/ccs-init . |
@ Move external policy loader from /.init to /sbin/ccs-init . |
| 972 |
|
|
| 973 |
Installing programs in / directory is not good for packaging. |
Installing programs in / directory is not good for packaging. |
| 974 |
|
|
| 975 |
|
Fix 2007/08/13 |
| 976 |
|
|
| 977 |
|
@ Update external policy loader. |
| 978 |
|
|
| 979 |
|
It turned out that /sbin/ccs-init invoked via call_usermodehelper() |
| 980 |
|
can handle interactive operations by opening /dev/console . |
| 981 |
|
Now, there is no difference between init=/sbin/ccs-init and |
| 982 |
|
call_usermodehelper("/sbin/ccs-init"), and users no longer need to |
| 983 |
|
add init=/sbin/ccs-init parameter to load policy before /sbin/init starts. |
| 984 |
|
|
| 985 |
|
Fix 2007/08/14 |
| 986 |
|
|
| 987 |
|
@ Update recvmsg() hooks. |
| 988 |
|
|
| 989 |
|
Until now, it was impossible to apply network access control for |
| 990 |
|
incoming UDP and RAW packets if they are brought to userland using |
| 991 |
|
read() or recvmsg() with NULL address because address buffer is NULL. |
| 992 |
|
I moved hooks from sock_recvmsg() to skb_recv_datagram() so that |
| 993 |
|
network access control for incoming UDP and RAW packets always work. |
|
|
Legend:
| Removed from v.325 |
|
| changed lines |
| |
Added in v.352 |
|
|
| 
TOMOYO
Parent Directory
Revision Log
Patch