From: José Bollo <jose.bollo@iot.bzh>
Date: Tue, 21 Jan 2020 16:06:11 +0000 (+0100)
Subject: Smack: Improve safety of signal policy
X-Git-Tag: 9.0.0~4
X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=commitdiff_plain;h=0ac107a872958522afa14595504611616c635b89;p=AGL%2Fmeta-agl.git

Smack: Improve safety of signal policy

This change enforce task to have `append` Smack's capacity
(instead of `write`) to send a signal to an other task.

Bug-AGL: SPEC-1780

Change-Id: I79687fcd0242db591255646d3b5c545badea3d47
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
---

diff --git a/meta-security/recipes-kernel/linux/linux/smack.cfg b/meta-security/recipes-kernel/linux/linux/smack.cfg
index 62f465a45..45a92f148 100644
--- a/meta-security/recipes-kernel/linux/linux/smack.cfg
+++ b/meta-security/recipes-kernel/linux/linux/smack.cfg
@@ -5,4 +5,5 @@ CONFIG_EXT3_FS_SECURITY=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_SECURITY=y
 CONFIG_SECURITY_SMACK=y
+CONFIG_SECURITY_SMACK_APPEND_SIGNALS=y
 CONFIG_TMPFS_XATTR=y