Re: [PATCH v20 09/23] LSM: Use lsmblob in security_task_getsecid
From: Paul Moore <paul@paul-moore.com>
Date: 2020-09-05 13:18:50
Also in:
linux-integrity, selinux
On Wed, Aug 26, 2020 at 11:11 AM Casey Schaufler [off-list ref] wrote:
Change the security_task_getsecid() interface to fill in a lsmblob structure instead of a u32 secid in support of LSM stacking. Audit interfaces will need to collect all possible secids for possible reporting. Reviewed-by: Kees Cook <redacted> Reviewed-by: John Johansen <john.johansen@canonical.com> Acked-by: Stephen Smalley <redacted> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> cc: linux-integrity@vger.kernel.org --- drivers/android/binder.c | 12 +------ include/linux/security.h | 7 ++-- kernel/audit.c | 16 ++++----- kernel/auditfilter.c | 4 +-- kernel/auditsc.c | 25 +++++++------- net/netlabel/netlabel_unlabeled.c | 5 ++- net/netlabel/netlabel_user.h | 6 +++- security/integrity/ima/ima_appraise.c | 10 +++--- security/integrity/ima/ima_main.c | 49 +++++++++++++++------------ security/security.c | 12 +++++-- 10 files changed, 76 insertions(+), 70 deletions(-)
Acked-by: Paul Moore <paul@paul-moore.com> -- paul moore www.paul-moore.com