]> www.pilppa.org Git - linux-2.6-omap-h63xx.git/commit
SELinux: remove current object class and permission validation mechanism
authorChad Sellers <csellers@tresys.com>
Mon, 6 Nov 2006 17:38:15 +0000 (12:38 -0500)
committerJames Morris <jmorris@namei.org>
Tue, 28 Nov 2006 17:04:35 +0000 (12:04 -0500)
commit5a64d4438ed1e759ccd30d9e90842bf360f19298
treeb9165ff810788cc934778345201d442f8e869a00
parent2ea5814472c3c910aed5c5b60f1f3b1000e353f1
SELinux: remove current object class and permission validation mechanism

Removes the current SELinux object class and permission validation code,
as the current code makes it impossible to change or remove object classes
and permissions on a running system. Additionally, the current code does
not actually validate that the classes and permissions are correct, but
instead merely validates that they do not change between policy reloads.

Signed-off-by: Chad Sellers <csellers@tresys.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/ss/services.c