tree 619eac3e523d6f16292dea2704cc9aa217a5b4d9
parent 2097f59920ea81516d7783396683cad22c26d140
author Himanshu Shukla <himanshu.sh@samsung.com> 1478774869 +0530
committer Casey Schaufler <casey@schaufler-ca.com> 1478805712 -0800

SMACK: Do not apply star label in smack_setprocattr hook

Smack prohibits processes from using the star ("*") and web ("@") labels.
Checks have been added in other functions. In smack_setprocattr()
hook, only check for web ("@") label has been added and restricted
from applying web ("@") label.
Check for star ("*") label should also be added in smack_setprocattr()
hook. Return error should be "-EINVAL" not "-EPERM" as permission
is there for setting label but not the label value as star ("*") or
web ("@").

Signed-off-by: Himanshu Shukla <himanshu.sh@samsung.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>