Backport LSM hook changes from mainline#24

Merged

Flamefire merged 38 commits intolineage-17.1from lsm_hooks_from_mainline

Jun 28, 2022

+756-685

Commits on Jun 27, 2022

security: introduce CONFIG_SECURITY_WRITABLE_HOOKS

James Morris
authored and
Flamefire
committed
security: mark LSM hooks as __ro_after_init

James Morris
authored and
Flamefire
committed
selinux: Remove unused variable in selinux_inode_init_security

Andreas Gruenbacher
authored and
Flamefire
committed
security: Make inode argument of inode_getsecurity non-const

Andreas Gruenbacher
authored and
Flamefire
committed
security: Make inode argument of inode_getsecid non-const

Andreas Gruenbacher
authored and
Flamefire
committed
selinux: Add accessor functions for inode->i_security

Andreas Gruenbacher
authored and
Flamefire
committed
Use inode_security in selinux_kernel_module_from_file
Flamefire
committed
security: Add hook to invalidate inode security labels

Andreas Gruenbacher
authored and
Flamefire
committed
selinux: Revalidate invalid inode security labels

Andreas Gruenbacher
authored and
Flamefire
committed
gfs2: Invalid security labels of inodes when they go invalid

Andreas Gruenbacher
authored and
Flamefire
committed
selinux: Inode label revalidation performance fix

Andreas Gruenbacher
authored and
Flamefire
committed
selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram()

pcmoore
authored and
Flamefire
committed
selinux: simply inode label states to INVALID and INITIALIZED

pcmoore
authored and
Flamefire
committed
selinux: don't revalidate an inode's label when explicitly setting it

pcmoore
authored and
Flamefire
committed
selinux: delay inode label lookup as long as possible

pcmoore
authored and
Flamefire
committed
selinux: check ss_initialized before revalidating an inode label

pcmoore
authored and
Flamefire
committed
selinux: distinguish non-init user namespace capability checks

stephensmalley
authored and
Flamefire
committed
selinux: Minor cleanups

Andreas Gruenbacher
authored and
Flamefire
committed
proc: Pass file mode to proc_pid_make_inode

Andreas Gruenbacher
authored and
Flamefire
committed
selinux: Clean up initialization of isec->sclass

Andreas Gruenbacher
authored and
Flamefire
committed
selinux: Convert isec->lock into a spinlock

Andreas Gruenbacher
authored and
Flamefire
committed
selinux: fix error initialization in inode_doinit_with_dentry()

Tianyue Ren
authored and
Flamefire
committed
selinux: allow dontauditx and auditallowx rules to take effect without allowx

bauen1
authored and
Flamefire
committed
selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling

pcmoore
authored and
Flamefire
committed
selinux: drop super_block backpointer from superblock_security_struct

WOnder93
authored and
Flamefire
committed
lsm,selinux: pass flowi_common instead of flowi to the LSM hooks

pcmoore
authored and
Flamefire
committed
security, overlayfs: provide copy up security hook for unioned files

rhvgoyal
authored and
Flamefire
committed
selinux: Implementation for inode_copy_up() hook

rhvgoyal
authored and
Flamefire
committed
security,overlayfs: Provide security hook for copy up of xattrs for overlay file

rhvgoyal
authored and
Flamefire
committed
selinux: Implementation for inode_copy_up_xattr() hook

rhvgoyal
authored and
Flamefire
committed
selinux: Pass security pointer to determine_inode_label()

rhvgoyal
authored and
Flamefire
committed
security, overlayfs: Provide hook to correctly label newly created files

rhvgoyal
authored and
Flamefire
committed
selinux: Implement dentry_create_files_as() hook

rhvgoyal
authored and
Flamefire
committed
prlimit,security,selinux: add a security hook for prlimit

stephensmalley
authored and
Flamefire
committed
security,selinux,smack: kill security_task_wait hook

stephensmalley
authored and
Flamefire
committed
security: drop the unused hook skb_owned_by

Paolo Abeni
authored and
Flamefire
committed
LSM: Add /sys/kernel/security/lsm

cschaufler
authored and
Flamefire
committed
LSM: Initialize security_hook_heads upon registration.

Tetsuo Handa
authored and
Flamefire
committed