David Howells a8478a6029 smack: Implement the watch_key and post_notification hooks ...

Implement the watch_key security hook in Smack to make sure that a key
grants the caller Read permission in order to set a watch on a key.

Also implement the post_notification security hook to make sure that the
notification source is granted Write permission by the watch queue.

For the moment, the watch_devices security hook is left unimplemented as
it's not obvious what the object should be since the queue is global and
didn't previously exist.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>

2020-05-19 15:47:38 +01:00

..

apparmor

.gitignore: add SPDX License Identifier

2020-03-25 11:50:48 +01:00

bpf

bpf: lsm: Initialize the BPF LSM hooks

2020-03-30 01:34:00 +02:00

integrity

Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2020-04-02 14:49:46 -07:00

keys

keys: Make the KEY_NEED_* perms an enum rather than a mask

2020-05-19 15:42:22 +01:00

loadpin

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

lockdown

security,lockdown,selinux: implement SELinux lockdown

2019-12-09 17:53:58 -05:00

safesetid

security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()

2019-10-30 08:45:57 -07:00

selinux

selinux: Implement the watch_key security hook

2020-05-19 15:47:15 +01:00

smack

smack: Implement the watch_key and post_notification hooks

2020-05-19 15:47:38 +01:00

tomoyo

.gitignore: add SPDX License Identifier

2020-03-25 11:50:48 +01:00

yama

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

commoncap.c

Merge branch 'next-lsm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2019-07-09 12:24:21 -07:00

device_cgroup.c

device_cgroup: Export devcgroup_check_permission

2019-10-07 15:11:38 -05:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

bpf: lsm: Initialize the BPF LSM hooks

2020-03-30 01:34:00 +02:00

Kconfig.hardening

Merge tag 'meminit-v5.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux

2019-07-28 12:33:15 -07:00

lsm_audit.c

security,lockdown,selinux: implement SELinux lockdown

2019-12-09 17:53:58 -05:00

Makefile

bpf: lsm: Initialize the BPF LSM hooks

2020-03-30 01:34:00 +02:00

min_addr.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

security.c

keys: Make the KEY_NEED_* perms an enum rather than a mask

2020-05-19 15:42:22 +01:00