iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security
History
David Howells 3e412ccc22 selinux: Implement the watch_key security hook 
Implement the watch_key security hook to make sure that a key grants the
caller View permission in order to set a watch on a key.

For the moment, the watch_devices security hook is left unimplemented as
it's not obvious what the object should be since the queue is global and
didn't previously exist.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Reviewed-by: James Morris <jamorris@linux.microsoft.com>
2020-05-19 15:47:15 +01:00
..
apparmor
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
bpf
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
integrity
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity
2020-04-02 14:49:46 -07:00
keys
keys: Make the KEY_NEED_* perms an enum rather than a mask
2020-05-19 15:42:22 +01:00
loadpin
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
lockdown
security,lockdown,selinux: implement SELinux lockdown
2019-12-09 17:53:58 -05:00
safesetid
security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()
2019-10-30 08:45:57 -07:00
selinux
selinux: Implement the watch_key security hook
2020-05-19 15:47:15 +01:00
smack
keys: Make the KEY_NEED_* perms an enum rather than a mask
2020-05-19 15:42:22 +01:00
tomoyo
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
yama
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
commoncap.c
Merge branch 'next-lsm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-07-09 12:24:21 -07:00
device_cgroup.c
device_cgroup: Export devcgroup_check_permission
2019-10-07 15:11:38 -05:00
inode.c
Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-07-19 10:42:02 -07:00
Kconfig
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
Kconfig.hardening
meminit fix
2019-07-28 12:33:15 -07:00
lsm_audit.c
security,lockdown,selinux: implement SELinux lockdown
2019-12-09 17:53:58 -05:00
Makefile
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
min_addr.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
security.c
keys: Make the KEY_NEED_* perms an enum rather than a mask
2020-05-19 15:42:22 +01:00