[PATCH 03/17] security: Add a hook for the point of notification insertion [ver #5]
jmorris at namei.org
Wed Mar 18 18:57:34 UTC 2020
On Wed, 18 Mar 2020, David Howells wrote:
> Add a security hook that allows an LSM to rule on whether a notification
> message is allowed to be inserted into a particular watch queue.
> The hook is given the following information:
> (1) The credentials of the triggerer (which may be init_cred for a system
> notification, eg. a hardware error).
> (2) The credentials of the whoever set the watch.
> (3) The notification message.
> Signed-off-by: David Howells <dhowells at redhat.com>
> cc: Casey Schaufler <casey at schaufler-ca.com>
> cc: Stephen Smalley <sds at tycho.nsa.gov>
> cc: linux-security-module at vger.kernel.org
> include/linux/lsm_hooks.h | 14 ++++++++++++++
> include/linux/security.h | 14 ++++++++++++++
> security/security.c | 9 +++++++++
> 3 files changed, 37 insertions(+)
Acked-by: James Morris <jamorris at linux.microsoft.com>
<jmorris at namei.org>
More information about the Linux-security-module-archive