(off-list ancestor, not in this archive)
[PATCH v14 00/23] LSM: Module stacking for AppArmor · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 01/23] LSM: Infrastructure management of the sock security · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 03/23] LSM: Use lsmblob in security_audit_rule_match · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 02/23] LSM: Create and manage the lsmblob data structure. · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
Re: [PATCH v14 02/23] LSM: Create and manage the lsmblob data structure. · Stephen Smalley <hidden> · 2020-01-24
[PATCH v14 04/23] LSM: Use lsmblob in security_kernel_act_as · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 05/23] net: Prepare UDS for security module stacking · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 06/23] Use lsmblob in security_secctx_to_secid · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
Re: [PATCH v14 06/23] Use lsmblob in security_secctx_to_secid · Stephen Smalley <hidden> · 2020-01-24
[PATCH v14 07/23] LSM: Use lsmblob in security_secid_to_secctx · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 08/23] LSM: Use lsmblob in security_ipc_getsecid · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 09/23] LSM: Use lsmblob in security_task_getsecid · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 10/23] LSM: Use lsmblob in security_inode_getsecid · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 11/23] LSM: Use lsmblob in security_cred_getsecid · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 13/23] LSM: Specify which LSM to display · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 12/23] IMA: Change internal interfaces to use lsmblobs · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 14/23] LSM: Ensure the correct LSM context releaser · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 15/23] LSM: Use lsmcontext in security_secid_to_secctx · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 16/23] LSM: Use lsmcontext in security_inode_getsecctx · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 17/23] LSM: security_secid_to_secctx in netlink netfilter · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 18/23] NET: Store LSM netlabel data in a lsmblob · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
Re: [PATCH v14 18/23] NET: Store LSM netlabel data in a lsmblob · Stephen Smalley <hidden> · 2020-01-24
[PATCH v14 19/23] LSM: Verify LSM display sanity in binder · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 21/23] Audit: Include object data for all security modules · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 20/23] Audit: Add subj_LSM fields when necessary · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
[PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-01-24
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-01-24
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-01-24
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Simon McVittie <hidden> · 2020-01-27
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · John Johansen <john.johansen@canonical.com> · 2020-02-03
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-27
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-31
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-02-03
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-02-03
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-02-03
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-02-04
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-02-04
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Simon McVittie <hidden> · 2020-02-10
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-02-10
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-02-10
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-02-10
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · John Johansen <john.johansen@canonical.com> · 2020-02-10
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Stephen Smalley <hidden> · 2020-02-11
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · John Johansen <john.johansen@canonical.com> · 2020-02-11
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-02-11
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · John Johansen <john.johansen@canonical.com> · 2020-02-11
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · John Johansen <john.johansen@canonical.com> · 2020-02-10
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · John Johansen <john.johansen@canonical.com> · 2020-02-03
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · Casey Schaufler <casey@schaufler-ca.com> · 2020-02-03
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · John Johansen <john.johansen@canonical.com> · 2020-02-03
Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context · John Johansen <john.johansen@canonical.com> · 2020-02-03
[PATCH v14 23/23] AppArmor: Remove the exclusive flag · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
Re: [PATCH v14 00/23] LSM: Module stacking for AppArmor · Stephen Smalley <hidden> · 2020-01-24
Re: [PATCH v14 00/23] LSM: Module stacking for AppArmor · Stephen Smalley <hidden> · 2020-01-24
Re: [PATCH v14 00/23] LSM: Module stacking for AppArmor · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-24
Re: [PATCH v14 00/23] LSM: Module stacking for AppArmor · Stephen Smalley <hidden> · 2020-01-27
KASAN slab-out-of-bounds in tun_chr_open/sock_init_data (Was: Re: [PATCH v14 00/23] LSM: Module stacking for AppArmor) · Stephen Smalley <hidden> · 2020-01-27
Re: KASAN slab-out-of-bounds in tun_chr_open/sock_init_data (Was: Re: [PATCH v14 00/23] LSM: Module stacking for AppArmor) · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-27
Re: [PATCH v14 00/23] LSM: Module stacking for AppArmor · Casey Schaufler <casey@schaufler-ca.com> · 2020-01-27

Re: [PATCH v14 22/23] LSM: Add /proc attr entry for full LSM context

From: Casey Schaufler <casey@schaufler-ca.com>
Date: 2020-02-03 21:44:01
Also in: selinux

On 2/3/2020 1:02 PM, John Johansen wrote:

On 1/24/20 12:16 PM, Stephen Smalley wrote:

quoted

...

Aside from the trailing newline and \0 issues, AppArmor also has a whitespace-separated (mode) field that may or may not be present in the contexts it presently returns, ala "/usr/sbin/cupsd (enforce)".  Not sure what they want for the new interfaces.

It is not needed for the new interface. And if I could go back and remove it from the old interface I would.

So, what would the "context" for this case be? "/usr/sbin/cupsd" or "enforce"?

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help