LSM: Add /sys/kernel/security/lsm

Browse source

I am still tired of having to find indirect ways to determine
what security modules are active on a system. I have added
/sys/kernel/security/lsm, which contains a comma separated
list of the active security modules. No more groping around
in /proc/filesystems or other clever hacks.

Unchanged from previous versions except for being updated
to the latest security next branch.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Acked-by: Paul Moore <paul@paul-moore.com>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.l.morris@oracle.com>

...

This commit is contained in:

Casey Schaufler 2017-01-18 17:09:05 -08:00 • committed by James Morris

parent 3ccb76c5df

commit d69dece5f5

11 changed files with 82 additions and 17 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

7

Documentation/security/LSM.txt

View file

12

include/linux/lsm_hooks.h

View file

3

security/apparmor/lsm.c

View file

3

security/commoncap.c

View file

26

security/inode.c

View file

2

security/loadpin/loadpin.c

View file

38

security/security.c

View file

2

security/selinux/hooks.c

View file

2

security/smack/smack_lsm.c

View file

2

security/tomoyo/tomoyo.c

View file

2

security/yama/yama_lsm.c

View file