]> www.infradead.org Git - users/jedix/linux-maple.git/commit
lsm: infrastructure management of the sock security
authorCasey Schaufler <casey@schaufler-ca.com>
Wed, 10 Jul 2024 21:32:25 +0000 (14:32 -0700)
committerPaul Moore <paul@paul-moore.com>
Mon, 29 Jul 2024 20:54:50 +0000 (16:54 -0400)
commit2aff9d20d50ac45dd13a013ef5231f4fb8912356
treec9fd24e54e311830f16c354d86a1c574ac196bb2
parent8400291e289ee6b2bf9779ff1c83a291501f017b
lsm: infrastructure management of the sock security

Move management of the sock->sk_security blob out
of the individual security modules and into the security
infrastructure. Instead of allocating the blobs from within
the modules the modules tell the infrastructure how much
space is required, and the space is allocated there.

Acked-by: Paul Moore <paul@paul-moore.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: John Johansen <john.johansen@canonical.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subject tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/linux/lsm_hooks.h
security/apparmor/include/net.h
security/apparmor/lsm.c
security/apparmor/net.c
security/security.c
security/selinux/hooks.c
security/selinux/include/objsec.h
security/selinux/netlabel.c
security/smack/smack.h
security/smack/smack_lsm.c
security/smack/smack_netfilter.c