Re: [PATCH 10/17] selinux: Implement the watch_key security hook [ver #5]
From: James Morris <jmorris@namei.org>
Date: 2020-03-18 19:06:34
Also in:
keyrings, linux-fsdevel, linux-security-module, lkml
On Wed, 18 Mar 2020, David Howells wrote:
Implement the watch_key security hook to make sure that a key grants the caller View permission in order to set a watch on a key. For the moment, the watch_devices security hook is left unimplemented as it's not obvious what the object should be since the queue is global and didn't previously exist. Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Stephen Smalley <redacted>
Reviewed-by: James Morris <redacted> -- James Morris [off-list ref]