Skip to content

RFC kdbus LSM/SELinux hooks

Paul Moore linux-audit selinux 2 versions – In review

Get series with b4
b4 am 20151007230615.7823.74519.stgit@localhost

Versions newest first · linked by author and title

  1. v3 RFC Latest5 patches 15 repliesIn review
  2. v2 RFC5 patches 2 repliesSuperseded

Patches in v3 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5kdbus: add creator credentials to the endpointsipc/kdbus/bus.c ipc/kdbus/endpoint.c ipc/kdbus/endpoint.h +3 more+19 -312 replies
2/5lsm: introduce hooks for kdbusinclude/linux/lsm_hooks.h include/linux/security.h ipc/kdbus/connection.c +4 more+265 -354 replies
3/5lsm: add support for auditing kdbus service namesinclude/linux/lsm_audit.h security/lsm_audit.c+6 -03 replies
4/5selinux: introduce kdbus names into the policysecurity/selinux/include/security.h security/selinux/ss/policydb.c security/selinux/ss/policydb.h +1 more+116 -181 reply
5/5selinux: introduce kdbus access controlssecurity/selinux/hooks.c security/selinux/include/classmap.h+155 -25 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v3 yet.

Read the v3 thread

Cover letter [RFC PATCH v3 0/5] kdbus LSM/SELinux hooks

No real functional improvements since the v2 patchset earlier this week, the main update is rebasing on GregKH's current kdbus tree which is now 4.3-rc4 based and as a result brings the LSM stacking changes and SELinux ioctl/xperm additions.

---

Paul Moore (5):
kdbus: add creator credentials to the endpoints
lsm: introduce hooks for kdbus
lsm: add support for auditing kdbus service names
selinux: introduce kdbus names into the policy
selinux: introduce kdbus access controls

 include/linux/lsm_audit.h           |    2 
 include/linux/lsm_hooks.h           |   63 ++++++++++++++
 include/linux/security.h            |   71 ++++++++++++++++
 ipc/kdbus/bus.c                     |   13 +--
 ipc/kdbus/connection.c              |   73 +++++++++++------
 ipc/kdbus/endpoint.c                |   14 +--
 ipc/kdbus/endpoint.h                |    3 -
 ipc/kdbus/fs.c                      |   10 ++
 ipc/kdbus/message.c                 |   19 +++-
 ipc/kdbus/metadata.c                |    6 -
 ipc/kdbus/node.c                    |   11 +--
 ipc/kdbus/node.h                    |    5 +
 security/lsm_audit.c                |    4 +
 security/security.c                 |   62 ++++++++++++++
 security/selinux/hooks.c            |  153 +++++++++++++++++++++++++++++++++++
 security/selinux/include/classmap.h |    4 +
 security/selinux/include/security.h |    5 +
 security/selinux/ss/policydb.c      |   88 ++++++++++++++++----
 security/selinux/ss/policydb.h      |    3 -
 security/selinux/ss/services.c      |   38 +++++++++
 20 files changed, 561 insertions(+), 86 deletions(-)