Micah Morton
87ca9aaf0c
LSM: generalize flag passing to security_capable ...
[ Upstream commit c1a85a00ea66cb6f0bd0f14e47c28c2b0999799f ]
This patch provides a general mechanism for passing flags to the
security_capable LSM hook. It replaces the specific 'audit' flag that is
used to tell security_capable whether it should log an audit message for
the given capability check. The reason for generalizing this flag
passing is so we can add an additional flag that signifies whether
security_capable is being called by a setid syscall (which is needed by
the proposed SafeSetID LSM).
Signed-off-by: Micah Morton <mortonm@chromium.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-01-23 08:21:29 +01:00
LSM: generalize flag passing to security_capable
2020-01-23 08:21:29 +01:00
apparmor: add base infastructure for socket mediation
2018-03-13 17:25:48 -07:00
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
2020-01-09 10:19:02 +01:00
apparmor: Fix memory leak of rule on error exit path
2018-06-07 01:50:48 -07:00
LSM: generalize flag passing to security_capable
2020-01-23 08:21:29 +01:00
apparmor: use SHASH_DESC_ON_STACK
2017-04-07 08:58:35 +10:00
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
2020-01-09 10:19:02 +01:00
apparmor: Check buffer bounds when mapping permissions mask
2018-07-19 16:24:43 -07:00
LSM: generalize flag passing to security_capable
2020-01-23 08:21:29 +01:00
apparmor: add debug assert AA_BUG and Kconfig to control debug info
2017-01-16 01:18:24 -08:00
apparmor: fix unsigned len comparison with less than zero
2020-01-04 19:13:08 +01:00
apparmor: Fix uninitialized value in aa_split_fqname
2018-11-27 16:13:00 +01:00
LSM: generalize flag passing to security_capable
2020-01-23 08:21:29 +01:00
apparmor: add base infastructure for socket mediation
2018-03-13 17:25:48 -07:00
apparmor: fix typo "traverse"
2018-05-03 00:50:12 -07:00
apparmor: fix typo "independent"
2018-05-03 00:50:30 -07:00
apparmor: add base infastructure for socket mediation
2018-03-13 17:25:48 -07:00
apparmor: cleanup add proper line wrapping to nulldfa.in
2018-02-09 11:30:01 -08:00
apparmor: Move path lookup to using preallocated buffers
2017-06-08 11:29:34 -07:00
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
2020-01-09 10:19:02 +01:00
apparmor: fix an error code in __aa_create_ns()
2018-08-21 16:24:56 -07:00
apparmor: reset pos on failure to unpack for various functions
2019-09-16 08:22:16 +02:00
apparmor: move context.h to cred.h
2018-02-09 11:30:01 -08:00
LSM: generalize flag passing to security_capable
2020-01-23 08:21:29 +01:00
apparmor: fix bad debug check in apparmor_secid_to_secctx()
2018-09-03 11:15:29 -07:00
apparmor: use the dfa to do label parse string splitting
2018-02-09 11:30:01 -08:00
apparmor: update domain transitions that are subsets of confinement at nnp
2018-02-09 11:30:01 -08:00
87ca9aaf0c