]> www.infradead.org Git - users/dwmw2/linux.git/commit
lsm: add the lsm_prop data structure
authorCasey Schaufler <casey@schaufler-ca.com>
Wed, 9 Oct 2024 17:32:09 +0000 (10:32 -0700)
committerPaul Moore <paul@paul-moore.com>
Fri, 11 Oct 2024 18:34:11 +0000 (14:34 -0400)
commited870e35db660724ff0d815d9a3ef9a6247ffbab
tree609bd55272de1ab997fe21a36616d7c6bf6d6727
parent9852d85ec9d492ebef56dc5f229416c925758edc
lsm: add the lsm_prop data structure

When more than one security module is exporting data to audit and
networking sub-systems a single 32 bit integer is no longer
sufficient to represent the data. Add a structure to be used instead.

The lsm_prop structure definition is intended to keep the LSM
specific information private to the individual security modules.
The module specific information is included in a new set of
header files under include/lsm. Each security module is allowed
to define the information included for its use in the lsm_prop.
SELinux includes a u32 secid. Smack includes a pointer into its
global label list. The conditional compilation based on feature
inclusion is contained in the include/lsm files.

Cc: apparmor@lists.ubuntu.com
Cc: bpf@vger.kernel.org
Cc: selinux@vger.kernel.org
Cc: linux-security-module@vger.kernel.org
Suggested-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Acked-by: John Johansen <john.johansen@canonical.com>
[PM: added include/linux/lsm/ to MAINTAINERS, subj tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
MAINTAINERS
include/linux/lsm/apparmor.h [new file with mode: 0644]
include/linux/lsm/bpf.h [new file with mode: 0644]
include/linux/lsm/selinux.h [new file with mode: 0644]
include/linux/lsm/smack.h [new file with mode: 0644]
include/linux/security.h