tree b34ee48f488a5032818e244c95855318a9afcf99
parent 90935cf0264a814d1ca90ad92efe64002d3c6522
author David Howells <dhowells@redhat.com> 1571151698 +0100
committer David Howells <dhowells@redhat.com> 1571173925 +0100

smack: Implement the watch_key and post_notification hooks

Implement the watch_key security hook in Smack to make sure that a key
grants the caller Read permission in order to set a watch on a key.

Also implement the post_notification security hook to make sure that the
notification source is granted Write permission by the watch queue.

For the moment, the watch_devices security hook is left unimplemented as
it's not obvious what the object should be since the queue is global and
didn't previously exist.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>