[PATCH v2] security: Add LSM fixup hooks to set*gid syscalls.
James Morris
jmorris at namei.org
Wed Aug 1 19:34:38 UTC 2018
On Tue, 31 Jul 2018, Micah Morton wrote:
> The ChromiumOS LSM used by ChromeOS will provide a hook for this, in
> order to enforce ChromeOS-specific policies regarding which UIDs/GIDs a
> process with CAP_SET{UID/GID} can transition to
Will you be submitting this LSM to mainline? It's a policy generally of
the kernel that we only add features to support in-tree code.
--
James Morris
<jmorris at namei.org>
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
More information about the Linux-security-module-archive
mailing list