Messages in this thread | | | Date | Thu, 19 Mar 2020 05:57:34 +1100 (AEDT) | From | James Morris <> | Subject | Re: [PATCH 03/17] security: Add a hook for the point of notification insertion [ver #5] |
| |
On Wed, 18 Mar 2020, David Howells wrote:
> Add a security hook that allows an LSM to rule on whether a notification > message is allowed to be inserted into a particular watch queue. > > The hook is given the following information: > > (1) The credentials of the triggerer (which may be init_cred for a system > notification, eg. a hardware error). > > (2) The credentials of the whoever set the watch. > > (3) The notification message. > > Signed-off-by: David Howells <dhowells@redhat.com> > cc: Casey Schaufler <casey@schaufler-ca.com> > cc: Stephen Smalley <sds@tycho.nsa.gov> > cc: linux-security-module@vger.kernel.org > --- > > include/linux/lsm_hooks.h | 14 ++++++++++++++ > include/linux/security.h | 14 ++++++++++++++ > security/security.c | 9 +++++++++ > 3 files changed, 37 insertions(+)
Acked-by: James Morris <jamorris@linux.microsoft.com>
-- James Morris <jmorris@namei.org>
| |