iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security
History
Thomas Cedeno 39030e1351 security: Add LSM hooks to set*gid syscalls 
The SafeSetID LSM uses the security_task_fix_setuid hook to filter
set*uid() syscalls according to its configured security policy. In
preparation for adding analagous support in the LSM for set*gid()
syscalls, we add the requisite hook here. Tested by putting print
statements in the security_task_fix_setgid hook and seeing them get hit
during kernel boot.

Signed-off-by: Thomas Cedeno <thomascedeno@google.com>
Signed-off-by: Micah Morton <mortonm@chromium.org>
2020-06-14 10:52:02 -07:00
..
apparmor
apparmor: Fix use-after-free in aa_audit_rule_init
2020-05-21 15:25:51 -07:00
bpf
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
integrity
evm: Fix a small race in init_desc()
2020-05-14 19:55:54 -04:00
keys
keys: Fix proc_keys_next to increase position index
2020-04-16 10:10:50 -07:00
loadpin
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
lockdown
security,lockdown,selinux: implement SELinux lockdown
2019-12-09 17:53:58 -05:00
safesetid
security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()
2019-10-30 08:45:57 -07:00
selinux
selinux/stable-5.7 PR 20200430
2020-04-30 16:35:45 -07:00
smack
Merge branch 'merge.nfs-fs_parse.1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2020-02-08 13:26:41 -08:00
tomoyo
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
yama
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
commoncap.c
exec: Always set cap_ambient in cap_bprm_set_creds
2020-05-26 13:11:00 -05:00
device_cgroup.c
device_cgroup: Cleanup cgroup eBPF device filter code
2020-04-13 14:41:54 -04:00
inode.c
Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-07-19 10:42:02 -07:00
Kconfig
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
Kconfig.hardening
meminit fix
2019-07-28 12:33:15 -07:00
lsm_audit.c
security,lockdown,selinux: implement SELinux lockdown
2019-12-09 17:53:58 -05:00
Makefile
device_cgroup: Cleanup cgroup eBPF device filter code
2020-04-13 14:41:54 -04:00
min_addr.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
security.c
security: Add LSM hooks to set*gid syscalls
2020-06-14 10:52:02 -07:00