Ondrej Mosnacek 70f4169ab4 selinux: parse contexts for mount options early ...

Commit b8b87fd954 ("selinux: Fix selinux_sb_mnt_opts_compat()")
started to parse mount options into SIDs in selinux_add_opt() if policy
has already been loaded. Since it's extremely unlikely that anyone would
depend on the ability to set SELinux contexts on fs_context before
loading the policy and then mounting that context after simplify the
logic by always parsing the options early.

Note that the multi-step mounting is only possible with the new
fscontext mount API and wasn't possible before its introduction.

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2022-02-04 13:40:15 -05:00

..

apparmor

lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()

2021-11-22 17:52:47 -05:00

bpf

bpf: Implement task local storage

2020-11-06 08:08:37 -08:00

integrity

Merge tag 'integrity-v5.17' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2022-01-11 13:11:10 -08:00

keys

security: DH - use KDF implementation from crypto API

2021-11-26 16:25:17 +11:00

landlock

landlock: Enable user space to infer supported features

2021-04-22 12:22:11 -07:00

loadpin

LSM: Add "contents" flag to kernel_read_file hook

2020-10-05 13:37:03 +02:00

lockdown

Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2020-06-02 17:36:24 -07:00

safesetid

LSM: SafeSetID: Mark safesetid_initialized as __initdata

2021-06-10 09:52:32 -07:00

selinux

selinux: parse contexts for mount options early

2022-02-04 13:40:15 -05:00

smack

lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()

2021-11-22 17:52:47 -05:00

tomoyo

tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()

2021-12-15 20:13:55 +09:00

yama

task_work: cleanup notification modes

2020-10-17 15:05:30 -06:00

commoncap.c

fs: support mapped mounts of mapped filesystems

2021-12-05 10:28:57 +01:00

device_cgroup.c

add missing bpf-cgroup.h includes

2021-12-16 14:57:09 -08:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

Merge branch 'akpm' (patches from Andrew)

2021-11-06 14:08:17 -07:00

Kconfig.hardening

gcc-plugins: Explicitly document purpose and deprecation schedule

2021-10-21 08:41:38 -07:00

lsm_audit.c

lsm_audit: avoid overloading the "key" audit field

2021-09-19 22:47:04 -04:00

Makefile

security: remove unneeded subdir-$(CONFIG_...)

2021-09-03 08:17:20 +09:00

min_addr.c

sysctl: pass kernel pointers to ->proc_handler

2020-04-27 02:07:40 -04:00

security.c

LSM: general protection fault in legacy_parse_param

2022-01-27 20:43:02 -05:00