summaryrefslogtreecommitdiffstats
path: root/meta-security/recipes-kernel/linux
diff options
context:
space:
mode:
authorJosé Bollo <jose.bollo@iot.bzh>2020-01-21 17:06:11 +0100
committerJosé Bollo <jose.bollo@iot.bzh>2020-02-14 09:01:05 +0000
commitc087734884b7d7eb308f190514e9c4740c662f23 (patch)
treed96b27734217c7ea7f1af3ace4dd6452fab14a09 /meta-security/recipes-kernel/linux
parentab377ea535b36239c6857beec333dee1b3c1ff85 (diff)
Smack: Improve safety of signal policy
This change enforce task to have `append` Smack's capacity (instead of `write`) to send a signal to an other task. Bug-AGL: SPEC-1780 Change-Id: I79687fcd0242db591255646d3b5c545badea3d47 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
Diffstat (limited to 'meta-security/recipes-kernel/linux')
-rw-r--r--meta-security/recipes-kernel/linux/linux/smack.cfg1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-security/recipes-kernel/linux/linux/smack.cfg b/meta-security/recipes-kernel/linux/linux/smack.cfg
index 62f465a45..45a92f148 100644
--- a/meta-security/recipes-kernel/linux/linux/smack.cfg
+++ b/meta-security/recipes-kernel/linux/linux/smack.cfg
@@ -5,4 +5,5 @@ CONFIG_EXT3_FS_SECURITY=y
CONFIG_EXT4_FS_SECURITY=y
CONFIG_SECURITY=y
CONFIG_SECURITY_SMACK=y
+CONFIG_SECURITY_SMACK_APPEND_SIGNALS=y
CONFIG_TMPFS_XATTR=y