tree 196b4cb35cf8dfdff0698dc4368cfd00acc7391a
parent 93ae86e759299718c611bc543b9b1633bf32905a
author Casey Schaufler <casey@schaufler-ca.com> 1291301019 -0800
committer Casey Schaufler <casey@schaufler-ca.com> 1291301019 -0800

This patch adds a new security attribute to Smack called
SMACK64EXEC. It defines label that is used while task is
running.

Exception: in smack_task_wait() child task is checked
for write access to parent task using label inherited
from the task that forked it.

Fixed issues from previous submit:
- SMACK64EXEC was not read when SMACK64 was not set.
- inode security blob was not updated after setting
  SMACK64EXEC
- inode security blob was not updated when removing
  SMACK64EXEC