Smack: Improve safety of signal policy 47/23647/6
authorJosé Bollo <jose.bollo@iot.bzh>
Tue, 21 Jan 2020 16:06:11 +0000 (17:06 +0100)
committerJosé Bollo <jose.bollo@iot.bzh>
Fri, 14 Feb 2020 09:01:05 +0000 (09:01 +0000)
This change enforce task to have `append` Smack's capacity
(instead of `write`) to send a signal to an other task.

Bug-AGL: SPEC-1780

Change-Id: I79687fcd0242db591255646d3b5c545badea3d47
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
meta-security/recipes-kernel/linux/linux/smack.cfg

index 62f465a..45a92f1 100644 (file)
@@ -5,4 +5,5 @@ CONFIG_EXT3_FS_SECURITY=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_SECURITY=y
 CONFIG_SECURITY_SMACK=y
+CONFIG_SECURITY_SMACK_APPEND_SIGNALS=y
 CONFIG_TMPFS_XATTR=y