lsm: use lsm_prop in security_current_getsecid

Change the security_current_getsecid_subj() and security_task_getsecid_obj() interfaces to fill in a lsm_prop structure instead of a u32 secid. Audit interfaces will need to collect all possible security data for possible reporting. Cc: linux-integrity@vger.kernel.org Cc: audit@vger.kernel.org Cc: selinux@vger.kernel.org Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> [PM: subject line tweak] Signed-off-by: Paul Moore <paul@paul-moore.com>
2026-10-24 19:10:26 +00:00 · 2024-10-09 10:32:15 -07:00 · 2024-10-09 10:32:15 -07:00 · 37f670aacd
commit 37f670aacd
parent e4f6822044
16 changed files with 139 additions and 108 deletions
--- a/include/linux/lsm_hook_defs.h
+++ b/include/linux/lsm_hook_defs.h
--- a/include/linux/security.h
+++ b/include/linux/security.h
--- a/kernel/audit.c
+++ b/kernel/audit.c
--- a/kernel/auditfilter.c
+++ b/kernel/auditfilter.c
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
--- a/net/netlabel/netlabel_unlabeled.c
+++ b/net/netlabel/netlabel_unlabeled.c
--- a/net/netlabel/netlabel_user.h
+++ b/net/netlabel/netlabel_user.h
--- a/security/apparmor/lsm.c
+++ b/security/apparmor/lsm.c
--- a/security/integrity/ima/ima.h
+++ b/security/integrity/ima/ima.h
--- a/security/integrity/ima/ima_api.c
+++ b/security/integrity/ima/ima_api.c
--- a/security/integrity/ima/ima_appraise.c
+++ b/security/integrity/ima/ima_appraise.c
--- a/security/integrity/ima/ima_main.c
+++ b/security/integrity/ima/ima_main.c
--- a/security/integrity/ima/ima_policy.c
+++ b/security/integrity/ima/ima_policy.c
--- a/security/security.c
+++ b/security/security.c
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
--- a/security/smack/smack_lsm.c
+++ b/security/smack/smack_lsm.c