[PATCH v3 15/16] LSM: Infrastructure management of the ipc security blob

Kees Cook keescook at chromium.org
Thu Sep 20 17:44:36 UTC 2018


On Wed, Sep 19, 2018 at 5:21 PM, Casey Schaufler <casey at schaufler-ca.com> wrote:
> LSM: Infrastructure management of the ipc security blob
>
> Move management of the kern_ipc_perm->security and
> msg_msg->security blobs out of the individual security
> modules and into the security infrastructure. Instead
> of allocating the blobs from within the modules the modules
> tell the infrastructure how much space is required, and
> the space is allocated there.

Maybe split this up too? (SELinux and Smack need tweaks?)

-Kees

-- 
Kees Cook
Pixel Security



More information about the Linux-security-module-archive mailing list