[PATCH bpf-next v1 02/13] bpf: lsm: Add a skeleton and config options

James Morris jmorris at namei.org
Tue Jan 7 21:13:16 UTC 2020


On Fri, 20 Dec 2019, KP Singh wrote:

> From: KP Singh <kpsingh at google.com>
> 
> The LSM can be enabled by CONFIG_SECURITY_BPF.
> Without CONFIG_SECURITY_BPF_ENFORCE, the LSM will run the
> attached eBPF programs but not enforce MAC policy based
> on the return value of the attached programs.
> 
> Signed-off-by: KP Singh <kpsingh at google.com>


Reviewed-by: James Morris <jamorris at linux.microsoft.com>


-- 
James Morris
<jmorris at namei.org>



More information about the Linux-security-module-archive mailing list