Mimi Zohar 377179cd28 security: define new LSM hook named security_kernel_load_data ...

Differentiate between the kernel reading a file specified by userspace
from the kernel loading a buffer containing data provided by userspace.
This patch defines a new LSM hook named security_kernel_load_data().

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: Eric Biederman <ebiederm@xmission.com>
Cc: Luis R. Rodriguez <mcgrof@kernel.org>
Cc: Kees Cook <keescook@chromium.org>
Cc: Casey Schaufler <casey@schaufler-ca.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>

2018-07-16 12:31:57 -07:00

..

apparmor

+ Features

2018-06-14 16:11:28 +09:00

integrity

Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2018-06-07 15:40:37 -07:00

keys

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

loadpin

get rid of pointless includes of fs_struct.h

2018-02-22 14:28:50 -05:00

selinux

docs: Fix some broken references

2018-06-15 18:10:01 -03:00

smack

Merge branch 'smack-for-4.18' of https://github.com/cschaufler/next-smack into next-smack

2018-06-05 13:18:58 -07:00

tomoyo

net: make getname() functions return length rather than use int* parameter

2018-02-12 14:15:04 -05:00

yama

pids: introduce find_get_task_by_vpid() helper

2018-02-06 18:32:46 -08:00

commoncap.c

capabilities: Allow privileged user in s_user_ns to set security.* xattrs

2018-05-24 12:03:31 -05:00

device_cgroup.c

docs: fix broken references with multiple hints

2018-06-15 18:10:01 -03:00

inode.c

securityfs: add the ability to support symlinks

2017-06-08 12:51:43 -07:00

Kconfig

Currently, hardened usercopy performs dynamic bounds checking on slab

2018-02-03 16:25:42 -08:00

lsm_audit.c

audit: use inline function to get audit context

2018-05-14 17:24:18 -04:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

min_addr.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

security.c

security: define new LSM hook named security_kernel_load_data

2018-07-16 12:31:57 -07:00