Mimi Zohar c77b8cdf74 module: replace the existing LSM hook in init_module ... Both the init_module and finit_module syscalls call either directly or indirectly the security_kernel_read_file LSM hook. This patch replaces the direct call in init_module with a call to the new security_kernel_load_data hook and makes the corresponding changes in SELinux, LoadPin, and IMA. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Cc: Jeff Vander Stoep <jeffv@google.com> Cc: Casey Schaufler <casey@schaufler-ca.com> Cc: Kees Cook <keescook@chromium.org> Acked-by: Jessica Yu <jeyu@kernel.org> Acked-by: Paul Moore <paul@paul-moore.com> Acked-by: Kees Cook <keescook@chromium.org> Signed-off-by: James Morris <james.morris@microsoft.com>		2018-07-16 12:31:57 -07:00
..
apparmor	+ Features	2018-06-14 16:11:28 +09:00
integrity	module: replace the existing LSM hook in init_module	2018-07-16 12:31:57 -07:00
keys	treewide: kmalloc() -> kmalloc_array()	2018-06-12 16:19:22 -07:00
loadpin	module: replace the existing LSM hook in init_module	2018-07-16 12:31:57 -07:00
selinux	module: replace the existing LSM hook in init_module	2018-07-16 12:31:57 -07:00
smack	Merge branch 'smack-for-4.18' of https://github.com/cschaufler/next-smack into next-smack	2018-06-05 13:18:58 -07:00
tomoyo	net: make getname() functions return length rather than use int* parameter	2018-02-12 14:15:04 -05:00
yama	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
commoncap.c	capabilities: Allow privileged user in s_user_ns to set security.* xattrs	2018-05-24 12:03:31 -05:00
device_cgroup.c	docs: fix broken references with multiple hints	2018-06-15 18:10:01 -03:00
inode.c
Kconfig	Currently, hardened usercopy performs dynamic bounds checking on slab	2018-02-03 16:25:42 -08:00
lsm_audit.c	audit: use inline function to get audit context	2018-05-14 17:24:18 -04:00
Makefile
min_addr.c
security.c	ima: based on policy require signed kexec kernel images	2018-07-16 12:31:57 -07:00