Stephen Smalley 5c108d4e18 selinux: randomize layout of key structures ...

Randomize the layout of key selinux data structures.
Initially this is applied to the selinux_state, selinux_ss,
policydb, and task_security_struct data structures.

NB To test/use this mechanism, one must install the
necessary build-time dependencies, e.g. gcc-plugin-devel on Fedora,
and enable CONFIG_GCC_PLUGIN_RANDSTRUCT in the kernel configuration.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Reviewed-by: Kees Cook <keescook@chromium.org>
[PM: double semi-colon fixed]
Signed-off-by: Paul Moore <paul@paul-moore.com>

2019-12-18 21:26:06 -05:00

..

audit.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

avc_ss.h

selinux: wrap AVC state

2018-03-20 16:58:17 -04:00

avc.h

selinux: fall back to ref-walk if audit is required

2019-12-09 18:37:47 -05:00

classmap.h

security,lockdown,selinux: implement SELinux lockdown

2019-12-09 17:53:58 -05:00

conditional.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372

2019-06-05 17:37:10 +02:00

ibpkey.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295

2019-06-05 17:36:38 +02:00

initial_sid_to_string.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

netif.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

netlabel.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13

2019-05-21 11:28:45 +02:00

netnode.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295

2019-06-05 17:36:38 +02:00

netport.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295

2019-06-05 17:36:38 +02:00

objsec.h

selinux: randomize layout of key structures

2019-12-18 21:26:06 -05:00

security.h

selinux: randomize layout of key structures

2019-12-18 21:26:06 -05:00

xfrm.h

security: Remove rtnl_lock() in selinux_xfrm_notify_policyload()

2018-03-29 13:47:53 -04:00