Browse Subversion Repository
Diff of /trunk/1.6.x/ccs-patch/README.ccs
Parent Directory
| Revision Log
| Patch
1101 |
To my surprise, "mount --bind source dest" accepts |
To my surprise, "mount --bind source dest" accepts |
1102 |
not only "both source and dest are directory" |
not only "both source and dest are directory" |
1103 |
but also "both source and dest are non-directory". |
but also "both source and dest are non-directory". |
1104 |
I was rejecting if dest is not a derectory in AddMountACL(). |
I was rejecting if dest is not a directory in AddMountACL(). |
1105 |
|
|
1106 |
@ Change log format. |
@ Change log format. |
1107 |
|
|
1127 |
common part. |
common part. |
1128 |
|
|
1129 |
These changes will reduce memory used by policy. |
These changes will reduce memory used by policy. |
1130 |
|
|
1131 |
|
Fix 2008/01/15 |
1132 |
|
|
1133 |
|
@ Add ptrace() hook. |
1134 |
|
|
1135 |
|
To prevent attackers from controlling important processes using |
1136 |
|
ptrace(), I added a hook for ptrace(). |
1137 |
|
Most programs (except strace(1) and gdb(1)) won't use ptrace(2). |
1138 |
|
|
1139 |
|
@ Fix sleep condition check in CheckSocketRecvDatagramPermission(). |
1140 |
|
|
1141 |
|
It seems that correct method to use is in_atomic() |
1142 |
|
rather than in_interrupt() because in_atomic() returns nonzero |
1143 |
|
whenever scheduling is not allowed. |
|
Legend:
Removed from v.860 |
|
changed lines |
|
Added in v.899 |
|
|
|