Skip to content

Commit

Permalink
security: remove root_plug
Browse files Browse the repository at this point in the history
    Remove the root_plug example LSM code.  It's unmaintained and
    increasingly broken in various ways.

    Made at the 2009 Kernel Summit in Tokyo!

    Acked-by: Greg Kroah-Hartman <gregkh@suse.de>
    Signed-off-by: James Morris <jmorris@namei.org>
  • Loading branch information
James Morris committed Oct 20, 2009
1 parent b7f3008 commit 3e1c251
Show file tree
Hide file tree
Showing 5 changed files with 1 addition and 115 deletions.
10 changes: 0 additions & 10 deletions Documentation/kernel-parameters.txt
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,6 @@ parameter is applicable:
PPT Parallel port support is enabled.
PS2 Appropriate PS/2 support is enabled.
RAM RAM disk support is enabled.
ROOTPLUG The example Root Plug LSM is enabled.
S390 S390 architecture is enabled.
SCSI Appropriate SCSI support is enabled.
A lot of drivers has their options described inside of
Expand Down Expand Up @@ -2163,15 +2162,6 @@ and is between 256 and 4096 characters. It is defined in the file
Useful for devices that are detected asynchronously
(e.g. USB and MMC devices).

root_plug.vendor_id=
[ROOTPLUG] Override the default vendor ID

root_plug.product_id=
[ROOTPLUG] Override the default product ID

root_plug.debug=
[ROOTPLUG] Enable debugging output

rw [KNL] Mount root device read-write on boot

S [KNL] Run init in single mode
Expand Down
13 changes: 0 additions & 13 deletions security/Kconfig
Original file line number Diff line number Diff line change
Expand Up @@ -100,19 +100,6 @@ config SECURITY_FILE_CAPABILITIES

If in doubt, answer N.

config SECURITY_ROOTPLUG
bool "Root Plug Support"
depends on USB=y && SECURITY
help
This is a sample LSM module that should only be used as such.
It prevents any programs running with egid == 0 if a specific
USB device is not present in the system.

See <http://www.linuxjournal.com/article.php?sid=6279> for
more information about this module.

If you are unsure how to answer this question, answer N.

config INTEL_TXT
bool "Enable Intel(R) Trusted Execution Technology (Intel(R) TXT)"
depends on HAVE_INTEL_TXT
Expand Down
1 change: 0 additions & 1 deletion security/Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,6 @@ obj-$(CONFIG_SECURITY_SELINUX) += selinux/built-in.o
obj-$(CONFIG_SECURITY_SMACK) += smack/built-in.o
obj-$(CONFIG_AUDIT) += lsm_audit.o
obj-$(CONFIG_SECURITY_TOMOYO) += tomoyo/built-in.o
obj-$(CONFIG_SECURITY_ROOTPLUG) += root_plug.o
obj-$(CONFIG_CGROUP_DEVICE) += device_cgroup.o

# Object integrity file lists
Expand Down
2 changes: 1 addition & 1 deletion security/commoncap.c
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
/* Common capabilities, needed by capability.o and root_plug.o
/* Common capabilities, needed by capability.o.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
Expand Down
90 changes: 0 additions & 90 deletions security/root_plug.c

This file was deleted.

0 comments on commit 3e1c251

Please sign in to comment.