summaryrefslogtreecommitdiffstats
path: root/security/tomoyo/Kconfig
diff options
context:
space:
mode:
authorTetsuo Handa2011-09-10 08:23:54 +0200
committerJames Morris2011-09-14 00:27:05 +0200
commit059d84dbb3897d4ee494a9c842c5dda54316cb47 (patch)
tree483ca0cb613b1304184b92f075b3f5283d36c723 /security/tomoyo/Kconfig
parentTOMOYO: Add environment variable name restriction support. (diff)
downloadkernel-qcow2-linux-059d84dbb3897d4ee494a9c842c5dda54316cb47.tar.gz
kernel-qcow2-linux-059d84dbb3897d4ee494a9c842c5dda54316cb47.tar.xz
kernel-qcow2-linux-059d84dbb3897d4ee494a9c842c5dda54316cb47.zip
TOMOYO: Add socket operation restriction support.
This patch adds support for permission checks for PF_INET/PF_INET6/PF_UNIX socket's bind()/listen()/connect()/send() operations. Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/tomoyo/Kconfig')
-rw-r--r--security/tomoyo/Kconfig2
1 files changed, 2 insertions, 0 deletions
diff --git a/security/tomoyo/Kconfig b/security/tomoyo/Kconfig
index 7c7f8c16c10f..8eb779b9d77f 100644
--- a/security/tomoyo/Kconfig
+++ b/security/tomoyo/Kconfig
@@ -1,8 +1,10 @@
config SECURITY_TOMOYO
bool "TOMOYO Linux Support"
depends on SECURITY
+ depends on NET
select SECURITYFS
select SECURITY_PATH
+ select SECURITY_NETWORK
default n
help
This selects TOMOYO Linux, pathname-based access control.