Fwd: [PATCH] security: Add LSM fixup hooks to set*gid syscalls.

Kees Cook keescook at chromium.org
Thu Jul 19 05:44:52 UTC 2018


[resending... list Cc got accidentally dropped...]


On Tue, Jul 17, 2018 at 2:40 PM, Micah Morton <mortonm at chromium.org> wrote:
>
>
> On Tue, Jul 17, 2018 at 1:19 PM Kees Cook <keescook at chromium.org> wrote:
>> Also, I think this needs a LSM_HOOK_INIT call somewhere too?
>
>
> Isn't that something that goes in the particular LSMs which may or may not
> want to use the hook?
> https://elixir.bootlin.com/linux/v4.18-rc2/ident/LSM_HOOK_INIT

Oops, yes, I got myself confused. I was thinking about a wrapper for
call_int_hook() which you already added. Thanks!

Please send an explicit "[PATCH v2] ..." email with the indentation
fixes (it's hard for maintainers to extract patches from a follow-up
like it was), and feel free to include:

Acked-by: Kees Cook <keescook at chromium.org>

after your Signed-off-by.

Thanks!

-Kees


-- 
Kees Cook
Pixel Security
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list