iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security/selinux/ss
History
Christian Göttsche 7470d0d13f selinux: allow kernfs symlinks to inherit parent directory context 
Currently symlinks on kernel filesystems, like sysfs, are labeled on
creation with the parent filesystem root sid.

Allow symlinks to inherit the parent directory context, so fine-grained
kernfs labeling can be applied to symlinks too and checking contexts
doesn't complain about them.

For backward-compatibility this behavior is contained in a new policy
capability: genfs_seclabel_symlinks

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
2020-02-10 10:49:01 -05:00
..
avtab.c
selinux: convert to kvmalloc
2019-03-12 10:04:02 -07:00
avtab.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372
2019-06-05 17:37:10 +02:00
conditional.c
selinux: simplify evaluate_cond_node()
2020-02-10 10:49:01 -05:00
conditional.h
selinux: simplify evaluate_cond_node()
2020-02-10 10:49:01 -05:00
constraint.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
context.h
selinux: sidtab reverse lookup hash table
2019-12-09 16:14:51 -05:00
ebitmap.c
selinux: default_range glblub implementation
2019-10-07 19:01:35 -04:00
ebitmap.h
selinux: default_range glblub implementation
2019-10-07 19:01:35 -04:00
hashtab.c
selinux: wrap global selinux state
2018-03-01 18:48:02 -05:00
hashtab.h
selinux: wrap global selinux state
2018-03-01 18:48:02 -05:00
mls_types.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mls.c
selinux: default_range glblub implementation
2019-10-07 19:01:35 -04:00
mls.h
selinux: overhaul sidtab to fix bug and improve performance
2018-12-05 16:12:32 -05:00
policydb.c
selinux: fix wrong buffer types in policydb.c
2020-01-16 14:31:05 -05:00
policydb.h
selinux: randomize layout of key structures
2019-12-18 21:26:06 -05:00
services.c
selinux: allow kernfs symlinks to inherit parent directory context
2020-02-10 10:49:01 -05:00
services.h
selinux: move status variables out of selinux_ss
2020-02-10 10:49:01 -05:00
sidtab.c
selinux: cache the SID -> context string translation
2019-12-09 16:14:51 -05:00
sidtab.h
selinux: cache the SID -> context string translation
2019-12-09 16:14:51 -05:00
symtab.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
symtab.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00