[PATCH bpf-next v1 06/13] bpf: lsm: Init Hooks and create files in securityfs
jmorris at namei.org
Tue Jan 7 21:22:27 UTC 2020
On Fri, 20 Dec 2019, KP Singh wrote:
> From: KP Singh <kpsingh at google.com>
> The LSM creates files in securityfs for each hook registered with the
> The list of LSM hooks are maintained in an internal header "hooks.h"
> Eventually, this list should either be defined collectively in
> include/linux/lsm_hooks.h or auto-generated from it.
> * Creation of a file for the hook in the securityfs.
> * Allocation of a bpf_lsm_hook data structure which stores
> a pointer to the dentry of the newly created file in securityfs.
> * Creation of a typedef for the hook so that BTF information
> can be generated for the LSM hooks to:
> - Make them "Compile Once, Run Everywhere".
> - Pass the right arguments when the attached programs are run.
> - Verify the accesses made by the program by using the BTF
> Signed-off-by: KP Singh <kpsingh at google.com>
Reviewed-by: James Morris <jamorris at linux.microsoft.com>
<jmorris at namei.org>
More information about the Linux-security-module-archive