Smack: Improve safety of signal policy 73/23873/3
authorJosé Bollo <jose.bollo@iot.bzh>
Tue, 21 Jan 2020 16:06:11 +0000 (17:06 +0100)
committerJan-Simon Moeller <jsmoeller@linuxfoundation.org>
Sat, 15 Feb 2020 22:04:06 +0000 (22:04 +0000)
This change enforce task to have `append` Smack's capacity
(instead of `write`) to send a signal to an other task.

Bug-AGL: SPEC-1780

Change-Id: I79687fcd0242db591255646d3b5c545badea3d47
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
meta-security/recipes-kernel/linux/linux/smack.cfg

index 62f465a..45a92f1 100644 (file)
@@ -5,4 +5,5 @@ CONFIG_EXT3_FS_SECURITY=y
 CONFIG_EXT4_FS_SECURITY=y
 CONFIG_SECURITY=y
 CONFIG_SECURITY_SMACK=y
+CONFIG_SECURITY_SMACK_APPEND_SIGNALS=y
 CONFIG_TMPFS_XATTR=y