summaryrefslogtreecommitdiffstats
path: root/meta-security/recipes-kernel
diff options
context:
space:
mode:
authorJosé Bollo <jose.bollo@iot.bzh>2020-01-21 17:06:11 +0100
committerJan-Simon Moeller <jsmoeller@linuxfoundation.org>2020-02-15 22:04:06 +0000
commit0ac107a872958522afa14595504611616c635b89 (patch)
tree7bf020fe1978aea4946dc2da5962ad3d3d1b008e /meta-security/recipes-kernel
parentcaba0e01706cc4b4a52bbe1c93ae93a649972505 (diff)
Smack: Improve safety of signal policy
This change enforce task to have `append` Smack's capacity (instead of `write`) to send a signal to an other task. Bug-AGL: SPEC-1780 Change-Id: I79687fcd0242db591255646d3b5c545badea3d47 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
Diffstat (limited to 'meta-security/recipes-kernel')
-rw-r--r--meta-security/recipes-kernel/linux/linux/smack.cfg1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-security/recipes-kernel/linux/linux/smack.cfg b/meta-security/recipes-kernel/linux/linux/smack.cfg
index 62f465a45..45a92f148 100644
--- a/meta-security/recipes-kernel/linux/linux/smack.cfg
+++ b/meta-security/recipes-kernel/linux/linux/smack.cfg
@@ -5,4 +5,5 @@ CONFIG_EXT3_FS_SECURITY=y
CONFIG_EXT4_FS_SECURITY=y
CONFIG_SECURITY=y
CONFIG_SECURITY_SMACK=y
+CONFIG_SECURITY_SMACK_APPEND_SIGNALS=y
CONFIG_TMPFS_XATTR=y