Re: [PATCH] LSM changes for 2.5.52

Greg KH (greg@kroah.com)
Wed, 18 Dec 2002 15:28:10 -0800


ChangeSet 1.900, 2002/12/18 15:09:33-08:00, greg@kroah.com

LSM: Fix up the description of the root_plug code to try to make it clearer.

diff -Nru a/security/Kconfig b/security/Kconfig
--- a/security/Kconfig Wed Dec 18 15:13:33 2002
+++ b/security/Kconfig Wed Dec 18 15:13:33 2002
@@ -27,8 +27,11 @@
depends on SECURITY!=n
help
This is a sample LSM module that should only be used as such.
- It enables control over processes being created by root users
- if a specific USB device is not present in the system.
+ It prevents any programs running with egid == 0 if a specific
+ USB device is not present in the system.
+
+ See <http://www.linuxjournal.com/article.php?sid=6279> for
+ more information about this module.

If you are unsure how to answer this question, answer N.

diff -Nru a/security/root_plug.c b/security/root_plug.c
--- a/security/root_plug.c Wed Dec 18 15:13:33 2002
+++ b/security/root_plug.c Wed Dec 18 15:13:33 2002
@@ -13,6 +13,9 @@
* If you want to turn this into something with a semblance of security,
* you need to hook the task_* functions also.
*
+ * See http://www.linuxjournal.com/article.php?sid=6279 for more information
+ * about this code.
+ *
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License as
* published by the Free Software Foundation, version 2 of the
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/