diff options
| author | Eric W. Biederman | 2009-11-20 18:24:19 +0100 |
|---|---|---|
| committer | Eric W. Biederman | 2009-11-20 18:37:51 +0100 |
| commit | c656ae95d1c5c8ed5763356263ace2d03087efec (patch) | |
| tree | 41409482c06e8d773a189dcfa8e3351f2a333e1f /security/tomoyo/file.c | |
| parent | security/tomoyo: Add a special case to handle accesses through the internal p... (diff) | |
| download | kernel-qcow2-linux-c656ae95d1c5c8ed5763356263ace2d03087efec.tar.gz kernel-qcow2-linux-c656ae95d1c5c8ed5763356263ace2d03087efec.tar.xz kernel-qcow2-linux-c656ae95d1c5c8ed5763356263ace2d03087efec.zip | |
security/tomoyo: Remove now unnecessary handling of security_sysctl.
Now that sys_sysctl is an emulation on top of proc sys all sysctl
operations look like normal filesystem operations and we don't need
to use the special sysctl hook to authenticate them.
Acked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Diffstat (limited to 'security/tomoyo/file.c')
| -rw-r--r-- | security/tomoyo/file.c | 21 |
1 files changed, 0 insertions, 21 deletions
diff --git a/security/tomoyo/file.c b/security/tomoyo/file.c index 5ae3a571559f..8346938809b1 100644 --- a/security/tomoyo/file.c +++ b/security/tomoyo/file.c @@ -1096,27 +1096,6 @@ static int tomoyo_check_single_path_permission2(struct tomoyo_domain_info * } /** - * tomoyo_check_file_perm - Check permission for sysctl()'s "read" and "write". - * - * @domain: Pointer to "struct tomoyo_domain_info". - * @filename: Filename to check. - * @perm: Mode ("read" or "write" or "read/write"). - * Returns 0 on success, negative value otherwise. - */ -int tomoyo_check_file_perm(struct tomoyo_domain_info *domain, - const char *filename, const u8 perm) -{ - struct tomoyo_path_info name; - const u8 mode = tomoyo_check_flags(domain, TOMOYO_MAC_FOR_FILE); - - if (!mode) - return 0; - name.name = filename; - tomoyo_fill_path_info(&name); - return tomoyo_check_file_perm2(domain, &name, perm, "sysctl", mode); -} - -/** * tomoyo_check_exec_perm - Check permission for "execute". * * @domain: Pointer to "struct tomoyo_domain_info". |