Re: [PATCH v26 17/25] LSM: Use lsmcontext in security_inode_getsecctx

From: Kees Cook <hidden>
Date: 2021-05-14 19:24:54
Also in: linux-nfs, lkml, selinux
Reply to: Casey Schaufler, 2021-05-13

On Thu, May 13, 2021 at 01:07:59PM -0700, Casey Schaufler wrote:

Change the security_inode_getsecctx() interface to fill
a lsmcontext structure instead of data and length pointers.
This provides the information about which LSM created the
context so that security_release_secctx() can use the
correct hook.

Acked-by: Stephen Smalley <redacted>
Acked-by: Paul Moore <paul@paul-moore.com>
Acked-by: Chuck Lever <redacted>
Reviewed-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>

Seem good to me.

Reviewed-by: Kees Cook <redacted>

-- 
Kees Cook

(off-list ancestor, not in this archive)
Casey Schaufler · 2021-05-13
[PATCH v26 01/25] LSM: Infrastructure management of the sock security · Casey Schaufler · 2021-05-13
[PATCH v26 02/25] LSM: Add the lsmblob data structure. · Casey Schaufler · 2021-05-13
Re: [PATCH v26 02/25] LSM: Add the lsmblob data structure. · Mickaël Salaün · 2021-05-22
Re: [PATCH v26 02/25] LSM: Add the lsmblob data structure. · Casey Schaufler · 2021-05-25
Re: [PATCH v26 02/25] LSM: Add the lsmblob data structure. · Mickaël Salaün · 2021-05-26
[PATCH v26 03/25] LSM: provide lsm name and id slot mappings · Casey Schaufler · 2021-05-13
Re: [PATCH v26 03/25] LSM: provide lsm name and id slot mappings · Kees Cook · 2021-05-14
Re: [PATCH v26 03/25] LSM: provide lsm name and id slot mappings · Paul Moore · 2021-05-21
[PATCH v26 04/25] IMA: avoid label collisions with stacked LSMs · Casey Schaufler · 2021-05-13
Re: [PATCH v26 04/25] IMA: avoid label collisions with stacked LSMs · Kees Cook · 2021-05-14
[PATCH v26 05/25] LSM: Use lsmblob in security_audit_rule_match · Casey Schaufler · 2021-05-13
[PATCH v26 06/25] LSM: Use lsmblob in security_kernel_act_as · Casey Schaufler · 2021-05-13
[PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid · Casey Schaufler · 2021-05-13
Re: [PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid · Kees Cook · 2021-05-14
Re: [PATCH v26 07/25] LSM: Use lsmblob in security_secctx_to_secid · Paul Moore · 2021-05-21
[PATCH v26 08/25] LSM: Use lsmblob in security_secid_to_secctx · Casey Schaufler · 2021-05-13
Re: [PATCH v26 08/25] LSM: Use lsmblob in security_secid_to_secctx · Kees Cook · 2021-05-14
Re: [PATCH v26 08/25] LSM: Use lsmblob in security_secid_to_secctx · Paul Moore · 2021-05-21
[PATCH v26 09/25] LSM: Use lsmblob in security_ipc_getsecid · Casey Schaufler · 2021-05-13
[PATCH v26 10/25] LSM: Use lsmblob in security_task_getsecid · Casey Schaufler · 2021-05-13
[PATCH v26 11/25] LSM: Use lsmblob in security_inode_getsecid · Casey Schaufler · 2021-05-13
[PATCH v26 12/25] LSM: Use lsmblob in security_cred_getsecid · Casey Schaufler · 2021-05-13
[PATCH v26 13/25] IMA: Change internal interfaces to use lsmblobs · Casey Schaufler · 2021-05-13
[PATCH v26 14/25] LSM: Specify which LSM to display · Casey Schaufler · 2021-05-13
Re: [PATCH v26 14/25] LSM: Specify which LSM to display · Kees Cook · 2021-05-14
Re: [PATCH v26 14/25] LSM: Specify which LSM to display · Casey Schaufler · 2021-05-17
Re: [PATCH v26 14/25] LSM: Specify which LSM to display · Paul Moore · 2021-05-21
[PATCH v26 15/25] LSM: Ensure the correct LSM context releaser · Casey Schaufler · 2021-05-13
Re: [PATCH v26 15/25] LSM: Ensure the correct LSM context releaser · Paul Moore · 2021-05-21
[PATCH v26 16/25] LSM: Use lsmcontext in security_secid_to_secctx · Casey Schaufler · 2021-05-13
[PATCH v26 17/25] LSM: Use lsmcontext in security_inode_getsecctx · Casey Schaufler · 2021-05-13
Re: [PATCH v26 17/25] LSM: Use lsmcontext in security_inode_getsecctx · Kees Cook · 2021-05-14
[PATCH v26 18/25] LSM: security_secid_to_secctx in netlink netfilter · Casey Schaufler · 2021-05-13
Re: [PATCH v26 18/25] LSM: security_secid_to_secctx in netlink netfilter · Paul Moore · 2021-05-21
[PATCH v26 19/25] NET: Store LSM netlabel data in a lsmblob · Casey Schaufler · 2021-05-13
[PATCH v26 20/25] LSM: Verify LSM display sanity in binder · Casey Schaufler · 2021-05-13
[PATCH v26 21/25] audit: add support for non-syscall auxiliary records · Casey Schaufler · 2021-05-13
Re: [PATCH v26 21/25] audit: add support for non-syscall auxiliary records · Paul Moore · 2021-05-21
[PATCH v26 22/25] Audit: Add new record for multiple process LSM attributes · Casey Schaufler · 2021-05-13
Re: [PATCH v26 22/25] Audit: Add new record for multiple process LSM attributes · Paul Moore · 2021-05-21
Re: [PATCH v26 22/25] Audit: Add new record for multiple process LSM attributes · Richard Guy Briggs · 2021-05-21
Re: [PATCH v26 22/25] Audit: Add new record for multiple process LSM attributes · Casey Schaufler · 2021-05-21
Re: [PATCH v26 22/25] Audit: Add new record for multiple process LSM attributes · Paul Moore · 2021-05-22
Re: [PATCH v26 22/25] Audit: Add new record for multiple process LSM attributes · Richard Guy Briggs · 2021-05-22
Re: [PATCH v26 22/25] Audit: Add new record for multiple process LSM attributes · Casey Schaufler · 2021-05-25
[PATCH v26 23/25] Audit: Add a new record for multiple object LSM attributes · Casey Schaufler · 2021-05-13
[PATCH v26 24/25] LSM: Add /proc attr entry for full LSM context · Casey Schaufler · 2021-05-13
[PATCH v26 25/25] AppArmor: Remove the exclusive flag · Casey Schaufler · 2021-05-13
View all 49 messages

`h`	back out one level
`j`	next message in thread / next series-diff position
`k`	previous message in thread / previous series-diff position
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help