TOMOYO: Allow reading only execute permission.
Policy editor needs to know allow_execute entries in order to build domain
transition tree. Reading all entries is slow. Thus, allow reading only
allow_execute entries.
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
diff --git a/security/tomoyo/common.h b/security/tomoyo/common.h
index cdc9ef5..67b9aea 100644
--- a/security/tomoyo/common.h
+++ b/security/tomoyo/common.h
@@ -571,6 +571,8 @@
bool read_single_domain;
/* Extra variable for reading. */
u8 read_bit;
+ /* Read only TOMOYO_TYPE_EXECUTE */
+ bool print_execute_only;
/* Bytes available for reading. */
int read_avail;
/* Size of read buffer. */