-
- Downloads
module: replace the existing LSM hook in init_module
Both the init_module and finit_module syscalls call either directly or indirectly the security_kernel_read_file LSM hook. This patch replaces the direct call in init_module with a call to the new security_kernel_load_data hook and makes the corresponding changes in SELinux, LoadPin, and IMA. Signed-off-by:Mimi Zohar <zohar@linux.vnet.ibm.com> Cc: Jeff Vander Stoep <jeffv@google.com> Cc: Casey Schaufler <casey@schaufler-ca.com> Cc: Kees Cook <keescook@chromium.org> Acked-by:
Jessica Yu <jeyu@kernel.org> Acked-by:
Paul Moore <paul@paul-moore.com> Acked-by:
Kees Cook <keescook@chromium.org> Signed-off-by:
James Morris <james.morris@microsoft.com>
Showing
- kernel/module.c 1 addition, 1 deletionkernel/module.c
- security/integrity/ima/ima_main.c 10 additions, 13 deletionssecurity/integrity/ima/ima_main.c
- security/loadpin/loadpin.c 6 additions, 0 deletionssecurity/loadpin/loadpin.c
- security/selinux/hooks.c 15 additions, 0 deletionssecurity/selinux/hooks.c
Loading
Please register or sign in to comment