lsm,selinux: Add LSM blob support for BPF objects

Browse source

This patch introduces LSM blob support for BPF maps, programs, and
tokens to enable LSM stacking and multiplexing of LSM modules that
govern BPF objects. Additionally, the existing BPF hooks used by
SELinux have been updated to utilize the new blob infrastructure,
removing the assumption of exclusive ownership of the security
pointer.

Signed-off-by: Blaise Boscaccy <bboscaccy@linux.microsoft.com>
[PM: dropped local variable init, style fixes]
Signed-off-by: Paul Moore <paul@paul-moore.com>

...

This commit is contained in:

Blaise Boscaccy 2025-07-22 14:21:34 -07:00 • committed by Paul Moore

parent e5bc887413

commit 5816bf4273

4 changed files with 116 additions and 49 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

include/linux/lsm_hooks.h

View file

86

security/security.c

View file

56

security/selinux/hooks.c

View file

20

security/selinux/include/objsec.h

View file