io_uring,lsm,selinux: add LSM hooks for io_uring_setup()

Browse source

It is desirable to allow LSM to configure accessibility to io_uring
because it is a coarse yet very simple way to restrict access to it. So,
add an LSM for io_uring_allowed() to guard access to io_uring.

Cc: Paul Moore <paul@paul-moore.com>
Signed-off-by: Hamza Mahfooz <hamzamahfooz@linux.microsoft.com>
Acked-by: Jens Axboe <axboe@kernel.dk>
[PM: merge fuzz due to changes in preceding patches, subj tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>

...

This commit is contained in:

Hamza Mahfooz 2025-01-27 10:57:18 -05:00 • committed by Paul Moore

parent b8a468e0b0

commit c6ad9fdbd4

6 changed files with 36 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

include/linux/lsm_hook_defs.h

View file

5

include/linux/security.h

View file

5

io_uring/io_uring.c

View file

12

security/security.c

View file

14

security/selinux/hooks.c

View file

2

security/selinux/include/classmap.h

View file