TOMOYO
Commit MetaInfo
Log Message
(empty log message)
Change Summary
Diff
| | @@ -1,6 +1,6 @@ | | 1 | | -This is TOMOYO Linux patch for kernel 3.2.22. | | 1 | +This is TOMOYO Linux patch for kernel 3.2.23. | | 2 | 2 | | | 3 | | -Source code for this patch is http://www.kernel.org/pub/linux/kernel/v3.0/linux-3.2.22.tar.bz2 | | 3 | +Source code for this patch is http://www.kernel.org/pub/linux/kernel/v3.0/linux-3.2.23.tar.bz2 | | 4 | 4 | --- | | 5 | 5 | fs/exec.c | 2 | | 6 | 6 | fs/open.c | 2 |
| | @@ -28,8 +28,8 @@ | | 28 | 28 | security/security.c | 134 +++++++++++++++++++++++++++++++++++++--------- | | 29 | 29 | 24 files changed, 247 insertions(+), 49 deletions(-) | | 30 | 30 | | | 31 | | ---- linux-3.2.22.orig/fs/exec.c | | 32 | | -+++ linux-3.2.22/fs/exec.c | | 31 | +--- linux-3.2.23.orig/fs/exec.c | | 32 | ++++ linux-3.2.23/fs/exec.c | | 33 | 33 | @@ -1535,7 +1535,7 @@ static int do_execve_common(const char * | | 34 | 34 | if (retval < 0) | | 35 | 35 | goto out; |
| | @@ -39,8 +39,8 @@ | | 39 | 39 | if (retval < 0) | | 40 | 40 | goto out; | | 41 | 41 | | | 42 | | ---- linux-3.2.22.orig/fs/open.c | | 43 | | -+++ linux-3.2.22/fs/open.c | | 42 | +--- linux-3.2.23.orig/fs/open.c | | 43 | ++++ linux-3.2.23/fs/open.c | | 44 | 44 | @@ -1106,6 +1106,8 @@ EXPORT_SYMBOL(sys_close); | | 45 | 45 | */ | | 46 | 46 | SYSCALL_DEFINE0(vhangup) |
| | @@ -50,8 +50,8 @@ | | 50 | 50 | if (capable(CAP_SYS_TTY_CONFIG)) { | | 51 | 51 | tty_vhangup_self(); | | 52 | 52 | return 0; | | 53 | | ---- linux-3.2.22.orig/fs/proc/version.c | | 54 | | -+++ linux-3.2.22/fs/proc/version.c | | 53 | +--- linux-3.2.23.orig/fs/proc/version.c | | 54 | ++++ linux-3.2.23/fs/proc/version.c | | 55 | 55 | @@ -32,3 +32,10 @@ static int __init proc_version_init(void | | 56 | 56 | return 0; | | 57 | 57 | } |
| | @@ -59,12 +59,12 @@ | | 59 | 59 | + | | 60 | 60 | +static int __init ccs_show_version(void) | | 61 | 61 | +{ | | 62 | | -+ printk(KERN_INFO "Hook version: 3.2.22 2012/07/06\n"); | | 62 | ++ printk(KERN_INFO "Hook version: 3.2.23 2012/07/14\n"); | | 63 | 63 | + return 0; | | 64 | 64 | +} | | 65 | 65 | +module_init(ccs_show_version); | | 66 | | ---- linux-3.2.22.orig/include/linux/init_task.h | | 67 | | -+++ linux-3.2.22/include/linux/init_task.h | | 66 | +--- linux-3.2.23.orig/include/linux/init_task.h | | 67 | ++++ linux-3.2.23/include/linux/init_task.h | | 68 | 68 | @@ -128,6 +128,14 @@ extern struct cred init_cred; | | 69 | 69 | | | 70 | 70 | #define INIT_TASK_COMM "swapper" |
| | @@ -88,8 +88,8 @@ | | 88 | 88 | } | | 89 | 89 | | | 90 | 90 | | | 91 | | ---- linux-3.2.22.orig/include/linux/sched.h | | 92 | | -+++ linux-3.2.22/include/linux/sched.h | | 91 | +--- linux-3.2.23.orig/include/linux/sched.h | | 92 | ++++ linux-3.2.23/include/linux/sched.h | | 93 | 93 | @@ -44,6 +44,8 @@ | | 94 | 94 | | | 95 | 95 | #ifdef __KERNEL__ |
| | @@ -110,8 +110,8 @@ | | 110 | 110 | }; | | 111 | 111 | | | 112 | 112 | /* Future-safe accessor for struct task_struct's cpus_allowed. */ | | 113 | | ---- linux-3.2.22.orig/include/linux/security.h | | 114 | | -+++ linux-3.2.22/include/linux/security.h | | 113 | +--- linux-3.2.23.orig/include/linux/security.h | | 114 | ++++ linux-3.2.23/include/linux/security.h | | 115 | 115 | @@ -38,6 +38,7 @@ | | 116 | 116 | #include <linux/slab.h> | | 117 | 117 | #include <linux/xattr.h> |
| | @@ -310,8 +310,8 @@ | | 310 | 310 | } | | 311 | 311 | #endif /* CONFIG_SECURITY_PATH */ | | 312 | 312 | | | 313 | | ---- linux-3.2.22.orig/include/net/ip.h | | 314 | | -+++ linux-3.2.22/include/net/ip.h | | 313 | +--- linux-3.2.23.orig/include/net/ip.h | | 314 | ++++ linux-3.2.23/include/net/ip.h | | 315 | 315 | @@ -217,6 +217,8 @@ extern void inet_get_local_port_range(in | | 316 | 316 | extern unsigned long *sysctl_local_reserved_ports; | | 317 | 317 | static inline int inet_is_reserved_local_port(int port) |
| | @@ -321,8 +321,8 @@ | | 321 | 321 | return test_bit(port, sysctl_local_reserved_ports); | | 322 | 322 | } | | 323 | 323 | | | 324 | | ---- linux-3.2.22.orig/kernel/fork.c | | 325 | | -+++ linux-3.2.22/kernel/fork.c | | 324 | +--- linux-3.2.23.orig/kernel/fork.c | | 325 | ++++ linux-3.2.23/kernel/fork.c | | 326 | 326 | @@ -195,6 +195,7 @@ void __put_task_struct(struct task_struc | | 327 | 327 | delayacct_tsk_free(tsk); | | 328 | 328 | put_signal_struct(tsk->signal); |
| | @@ -349,8 +349,8 @@ | | 349 | 349 | bad_fork_cleanup_policy: | | 350 | 350 | perf_event_free_task(p); | | 351 | 351 | #ifdef CONFIG_NUMA | | 352 | | ---- linux-3.2.22.orig/kernel/kexec.c | | 353 | | -+++ linux-3.2.22/kernel/kexec.c | | 352 | +--- linux-3.2.23.orig/kernel/kexec.c | | 353 | ++++ linux-3.2.23/kernel/kexec.c | | 354 | 354 | @@ -40,6 +40,7 @@ | | 355 | 355 | #include <asm/io.h> | | 356 | 356 | #include <asm/system.h> |
| | @@ -368,8 +368,8 @@ | | 368 | 368 | | | 369 | 369 | /* | | 370 | 370 | * Verify we have a legal set of flags | | 371 | | ---- linux-3.2.22.orig/kernel/module.c | | 372 | | -+++ linux-3.2.22/kernel/module.c | | 371 | +--- linux-3.2.23.orig/kernel/module.c | | 372 | ++++ linux-3.2.23/kernel/module.c | | 373 | 373 | @@ -58,6 +58,7 @@ | | 374 | 374 | #include <linux/jump_label.h> | | 375 | 375 | #include <linux/pfn.h> |
| | @@ -396,8 +396,8 @@ | | 396 | 396 | | | 397 | 397 | /* Do all the hard work */ | | 398 | 398 | mod = load_module(umod, len, uargs); | | 399 | | ---- linux-3.2.22.orig/kernel/ptrace.c | | 400 | | -+++ linux-3.2.22/kernel/ptrace.c | | 399 | +--- linux-3.2.23.orig/kernel/ptrace.c | | 400 | ++++ linux-3.2.23/kernel/ptrace.c | | 401 | 401 | @@ -868,6 +868,11 @@ SYSCALL_DEFINE4(ptrace, long, request, l | | 402 | 402 | { | | 403 | 403 | struct task_struct *child; |
| | @@ -422,8 +422,8 @@ | | 422 | 422 | | | 423 | 423 | if (request == PTRACE_TRACEME) { | | 424 | 424 | ret = ptrace_traceme(); | | 425 | | ---- linux-3.2.22.orig/kernel/sched.c | | 426 | | -+++ linux-3.2.22/kernel/sched.c | | 425 | +--- linux-3.2.23.orig/kernel/sched.c | | 426 | ++++ linux-3.2.23/kernel/sched.c | | 427 | 427 | @@ -5113,6 +5113,8 @@ int can_nice(const struct task_struct *p | | 428 | 428 | SYSCALL_DEFINE1(nice, int, increment) | | 429 | 429 | { |
| | @@ -433,8 +433,8 @@ | | 433 | 433 | | | 434 | 434 | /* | | 435 | 435 | * Setpriority might change our priority at the same moment. | | 436 | | ---- linux-3.2.22.orig/kernel/signal.c | | 437 | | -+++ linux-3.2.22/kernel/signal.c | | 436 | +--- linux-3.2.23.orig/kernel/signal.c | | 437 | ++++ linux-3.2.23/kernel/signal.c | | 438 | 438 | @@ -2746,6 +2746,8 @@ SYSCALL_DEFINE4(rt_sigtimedwait, const s | | 439 | 439 | SYSCALL_DEFINE2(kill, pid_t, pid, int, sig) | | 440 | 440 | { |
| | @@ -480,8 +480,8 @@ | | 480 | 480 | | | 481 | 481 | return do_send_specific(tgid, pid, sig, info); | | 482 | 482 | } | | 483 | | ---- linux-3.2.22.orig/kernel/sys.c | | 484 | | -+++ linux-3.2.22/kernel/sys.c | | 483 | +--- linux-3.2.23.orig/kernel/sys.c | | 484 | ++++ linux-3.2.23/kernel/sys.c | | 485 | 485 | @@ -180,6 +180,10 @@ SYSCALL_DEFINE3(setpriority, int, which, | | 486 | 486 | | | 487 | 487 | if (which > PRIO_USER || which < PRIO_PROCESS) |
| | @@ -520,8 +520,8 @@ | | 520 | 520 | | | 521 | 521 | down_write(&uts_sem); | | 522 | 522 | errno = -EFAULT; | | 523 | | ---- linux-3.2.22.orig/kernel/time/ntp.c | | 524 | | -+++ linux-3.2.22/kernel/time/ntp.c | | 523 | +--- linux-3.2.23.orig/kernel/time/ntp.c | | 524 | ++++ linux-3.2.23/kernel/time/ntp.c | | 525 | 525 | @@ -15,6 +15,7 @@ | | 526 | 526 | #include <linux/time.h> | | 527 | 527 | #include <linux/mm.h> |
| | @@ -555,8 +555,8 @@ | | 555 | 555 | if (!(txc->modes & ADJ_NANO)) | | 556 | 556 | delta.tv_nsec *= 1000; | | 557 | 557 | result = timekeeping_inject_offset(&delta); | | 558 | | ---- linux-3.2.22.orig/net/ipv4/raw.c | | 559 | | -+++ linux-3.2.22/net/ipv4/raw.c | | 558 | +--- linux-3.2.23.orig/net/ipv4/raw.c | | 559 | ++++ linux-3.2.23/net/ipv4/raw.c | | 560 | 560 | @@ -695,6 +695,10 @@ static int raw_recvmsg(struct kiocb *ioc | | 561 | 561 | skb = skb_recv_datagram(sk, flags, noblock, &err); | | 562 | 562 | if (!skb) |
| | @@ -568,8 +568,8 @@ | | 568 | 568 | | | 569 | 569 | copied = skb->len; | | 570 | 570 | if (len < copied) { | | 571 | | ---- linux-3.2.22.orig/net/ipv4/udp.c | | 572 | | -+++ linux-3.2.22/net/ipv4/udp.c | | 571 | +--- linux-3.2.23.orig/net/ipv4/udp.c | | 572 | ++++ linux-3.2.23/net/ipv4/udp.c | | 573 | 573 | @@ -1184,6 +1184,10 @@ try_again: | | 574 | 574 | &peeked, &err); | | 575 | 575 | if (!skb) |
| | @@ -581,8 +581,8 @@ | | 581 | 581 | | | 582 | 582 | ulen = skb->len - sizeof(struct udphdr); | | 583 | 583 | copied = len; | | 584 | | ---- linux-3.2.22.orig/net/ipv6/raw.c | | 585 | | -+++ linux-3.2.22/net/ipv6/raw.c | | 584 | +--- linux-3.2.23.orig/net/ipv6/raw.c | | 585 | ++++ linux-3.2.23/net/ipv6/raw.c | | 586 | 586 | @@ -469,6 +469,10 @@ static int rawv6_recvmsg(struct kiocb *i | | 587 | 587 | skb = skb_recv_datagram(sk, flags, noblock, &err); | | 588 | 588 | if (!skb) |
| | @@ -594,8 +594,8 @@ | | 594 | 594 | | | 595 | 595 | copied = skb->len; | | 596 | 596 | if (copied > len) { | | 597 | | ---- linux-3.2.22.orig/net/ipv6/udp.c | | 598 | | -+++ linux-3.2.22/net/ipv6/udp.c | | 597 | +--- linux-3.2.23.orig/net/ipv6/udp.c | | 598 | ++++ linux-3.2.23/net/ipv6/udp.c | | 599 | 599 | @@ -361,6 +361,10 @@ try_again: | | 600 | 600 | &peeked, &err); | | 601 | 601 | if (!skb) |
| | @@ -607,8 +607,8 @@ | | 607 | 607 | | | 608 | 608 | ulen = skb->len - sizeof(struct udphdr); | | 609 | 609 | copied = len; | | 610 | | ---- linux-3.2.22.orig/net/socket.c | | 611 | | -+++ linux-3.2.22/net/socket.c | | 610 | +--- linux-3.2.23.orig/net/socket.c | | 611 | ++++ linux-3.2.23/net/socket.c | | 612 | 612 | @@ -1530,6 +1530,10 @@ SYSCALL_DEFINE4(accept4, int, fd, struct | | 613 | 613 | if (err < 0) | | 614 | 614 | goto out_fd; |
| | @@ -620,8 +620,8 @@ | | 620 | 620 | if (upeer_sockaddr) { | | 621 | 621 | if (newsock->ops->getname(newsock, (struct sockaddr *)&address, | | 622 | 622 | &len, 2) < 0) { | | 623 | | ---- linux-3.2.22.orig/net/unix/af_unix.c | | 624 | | -+++ linux-3.2.22/net/unix/af_unix.c | | 623 | +--- linux-3.2.23.orig/net/unix/af_unix.c | | 624 | ++++ linux-3.2.23/net/unix/af_unix.c | | 625 | 625 | @@ -1780,6 +1780,10 @@ static int unix_dgram_recvmsg(struct kio | | 626 | 626 | wake_up_interruptible_sync_poll(&u->peer_wait, | | 627 | 627 | POLLOUT | POLLWRNORM | POLLWRBAND); |
| | @@ -633,8 +633,8 @@ | | 633 | 633 | if (msg->msg_name) | | 634 | 634 | unix_copy_addr(msg, skb->sk); | | 635 | 635 | | | 636 | | ---- linux-3.2.22.orig/security/Kconfig | | 637 | | -+++ linux-3.2.22/security/Kconfig | | 636 | +--- linux-3.2.23.orig/security/Kconfig | | 637 | ++++ linux-3.2.23/security/Kconfig | | 638 | 638 | @@ -227,5 +227,7 @@ config DEFAULT_SECURITY | | 639 | 639 | default "apparmor" if DEFAULT_SECURITY_APPARMOR | | 640 | 640 | default "" if DEFAULT_SECURITY_DAC |
| | @@ -643,8 +643,8 @@ | | 643 | 643 | + | | 644 | 644 | endmenu | | 645 | 645 | | | 646 | | ---- linux-3.2.22.orig/security/Makefile | | 647 | | -+++ linux-3.2.22/security/Makefile | | 646 | +--- linux-3.2.23.orig/security/Makefile | | 647 | ++++ linux-3.2.23/security/Makefile | | 648 | 648 | @@ -26,3 +26,6 @@ obj-$(CONFIG_CGROUP_DEVICE) += device_c | | 649 | 649 | # Object integrity file lists | | 650 | 650 | subdir-$(CONFIG_INTEGRITY) += integrity |
| | @@ -652,8 +652,8 @@ | | 652 | 652 | + | | 653 | 653 | +subdir-$(CONFIG_CCSECURITY) += ccsecurity | | 654 | 654 | +obj-$(CONFIG_CCSECURITY) += ccsecurity/built-in.o | | 655 | | ---- linux-3.2.22.orig/security/security.c | | 656 | | -+++ linux-3.2.22/security/security.c | | 655 | +--- linux-3.2.23.orig/security/security.c | | 656 | ++++ linux-3.2.23/security/security.c | | 657 | 657 | @@ -203,7 +203,10 @@ int security_syslog(int type) | | 658 | 658 | | | 659 | 659 | int security_settime(const struct timespec *ts, const struct timezone *tz) |
旧リポジトリブラウザで表示
|