kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-18 19:12:56 +00:00
Code Issues Releases Packages Activity
linux/security/selinux/include
History
Casey Schaufler b11fbade65 lsm: infrastructure management of the sock security 
[ Upstream commit 2aff9d20d5 ]

Move management of the sock->sk_security blob out
of the individual security modules and into the security
infrastructure. Instead of allocating the blobs from within
the modules the modules tell the infrastructure how much
space is required, and the space is allocated there.

Acked-by: Paul Moore <paul@paul-moore.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: John Johansen <john.johansen@canonical.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subject tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Stable-dep-of: 56acfeb100 ("selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()")
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2026-08-23 14:17:21 +02:00
..
audit.h ima: Avoid blocking in RCU read-side critical section 2024-07-18 13:07:34 +02:00
avc.h selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit() 2021-06-11 13:11:45 -04:00
avc_ss.h selinux: wrap AVC state 2018-03-20 16:58:17 -04:00
classmap.h mctp: Add MCTP base 2021-07-29 15:06:49 +01:00
conditional.h selinux: move policy commit after updating selinuxfs 2020-08-17 20:50:22 -04:00
ibpkey.h selinux: move ibpkeys code under CONFIG_SECURITY_INFINIBAND. 2020-01-10 11:56:37 -05:00
ima.h selinux: measure state and policy capabilities 2021-03-08 19:39:07 -05:00
initial_sid_to_string.h selinux: remove unused initial SIDs and improve handling 2020-02-27 19:34:24 -05:00
netif.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
netlabel.h selinux: netlabel: Remove unused inline function 2020-05-12 20:16:33 -04:00
netnode.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295 2019-06-05 17:36:38 +02:00
netport.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295 2019-06-05 17:36:38 +02:00
objsec.h lsm: infrastructure management of the sock security 2026-08-23 14:17:21 +02:00
policycap.h selinux: allow FIOCLEX and FIONCLEX with policy capability 2022-04-08 14:23:55 +02:00
policycap_names.h selinux: allow FIOCLEX and FIONCLEX with policy capability 2022-04-08 14:23:55 +02:00
security.h selinux: allow FIOCLEX and FIONCLEX with policy capability 2022-04-08 14:23:55 +02:00
xfrm.h selinux: delete selinux_xfrm_policy_lookup() useless argument 2021-05-10 21:38:31 -04:00