CHROMIUM: Pull in Yama LSM

CHROMIUM: Pull in Yama LSM

Until we integrate a more complete LSM or an out of tree framework like
GRsecurity, pull in the baseline protections from Yama:

  https://patchwork.kernel.org/patch/108412/raw/

It provides a tangible enhancement to the baseline security of a Linux
kernel-based operating system.

(Notably, ptrace scoping is useful since we can't just kill ptrace.)

Signed-off-by: Will Drewry <wad@chromium.org>;

R=olofj@chromium.org,ups@chromium.org
BUG=chromium-os:13131
TEST=As follows:
- boot and run x86 basic usage => PASS
- boot and run x86 in dev mode:
     sleep 3600 &
     gdb -p sleep_pid
     [access denied]
     sudo gdb -p sleep_pid
     [success] => PASS
- boot and run x86 and cause chrome SEGV
    kill -SEGV chrome_pid
    /home/chronos/user/crash has crash data  => PASS
- boot and run the various autotest testsuites [in progress]

All tests imply a configuration change which will be mailed separately.

[kees.cook, 2011-03-16 00:28:56]

Updated patch series is here, which fixes bugs needed to operate correctly with
Breakpad:

http://kernel.ubuntu.com/git?p=kees/linux-2.6.git;a=shortlog;h=refs/heads/yama

[Will Drewry, 2011-03-16 01:43:04]

On 2011/03/16 00:28:56, kees.cook wrote:
> Updated patch series is here, which fixes bugs needed to operate correctly
with
> Breakpad:
> 
> http://kernel.ubuntu.com/git?p=kees/linux-2.6.git;a=shortlog;h=refs/heads/yama

Thanks!

Reviewers: I'm going to close this and push up a patch series that includes all
current yama relevent changes.  Incoming!