Re: [PATCH 03/17] security: Add a hook for the point of notification insertion [ver #5]
From: James Morris <jmorris@namei.org>
Date: 2020-03-18 18:57:57
Also in:
keyrings, linux-api, linux-fsdevel, lkml
On Wed, 18 Mar 2020, David Howells wrote:
Add a security hook that allows an LSM to rule on whether a notification
message is allowed to be inserted into a particular watch queue.
The hook is given the following information:
(1) The credentials of the triggerer (which may be init_cred for a system
notification, eg. a hardware error).
(2) The credentials of the whoever set the watch.
(3) The notification message.
Signed-off-by: David Howells <dhowells@redhat.com>
cc: Casey Schaufler <casey@schaufler-ca.com>
cc: Stephen Smalley <redacted>
cc: linux-security-module@vger.kernel.org
---
include/linux/lsm_hooks.h | 14 ++++++++++++++
include/linux/security.h | 14 ++++++++++++++
security/security.c | 9 +++++++++
3 files changed, 37 insertions(+)Acked-by: James Morris <redacted> -- James Morris [off-list ref]