LSM: Fix up the description of the root_plug code to try to make it clearer.

diff --git a/security/Kconfig b/security/Kconfig
index 5481048b6d4c0f2cae9c2dca61e8c60c61d6ceba..76d62c92176f83aeb48b3118bfec6878718747fb 100644 (file)
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -27,8 +27,11 @@ config SECURITY_ROOTPLUG
        depends on SECURITY!=n
        help
          This is a sample LSM module that should only be used as such.
-         It enables control over processes being created by root users
-         if a specific USB device is not present in the system.
+         It prevents any programs running with egid == 0 if a specific
+         USB device is not present in the system.
+
+         See <http://www.linuxjournal.com/article.php?sid=6279> for
+         more information about this module.
          
          If you are unsure how to answer this question, answer N.
 

diff --git a/security/root_plug.c b/security/root_plug.c
index bf076b3746aa72de2cf618f32dc87b870dd4e909..b634f94e7b72d2276a3547ee5f90e2e956889ec1 100644 (file)
--- a/security/root_plug.c
+++ b/security/root_plug.c
@@ -13,6 +13,9 @@
  * If you want to turn this into something with a semblance of security,
  * you need to hook the task_* functions also.
  *
+ * See http://www.linuxjournal.com/article.php?sid=6279 for more information
+ * about this code.
+ *
  *     This program is free software; you can redistribute it and/or
  *     modify it under the terms of the GNU General Public License as
  *     published by the Free Software Foundation, version 2 of the