From: José Bollo Date: Tue, 21 Jan 2020 16:06:11 +0000 (+0100) Subject: Smack: Improve safety of signal policy X-Git-Tag: 9.0.0~4 X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=commitdiff_plain;h=0ac107a872958522afa14595504611616c635b89;p=AGL%2Fmeta-agl.git Smack: Improve safety of signal policy This change enforce task to have `append` Smack's capacity (instead of `write`) to send a signal to an other task. Bug-AGL: SPEC-1780 Change-Id: I79687fcd0242db591255646d3b5c545badea3d47 Signed-off-by: José Bollo --- diff --git a/meta-security/recipes-kernel/linux/linux/smack.cfg b/meta-security/recipes-kernel/linux/linux/smack.cfg index 62f465a45..45a92f148 100644 --- a/meta-security/recipes-kernel/linux/linux/smack.cfg +++ b/meta-security/recipes-kernel/linux/linux/smack.cfg @@ -5,4 +5,5 @@ CONFIG_EXT3_FS_SECURITY=y CONFIG_EXT4_FS_SECURITY=y CONFIG_SECURITY=y CONFIG_SECURITY_SMACK=y +CONFIG_SECURITY_SMACK_APPEND_SIGNALS=y CONFIG_TMPFS_XATTR=y