leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

vfs: Put security flags into the fs_context struct

Browse Source 
Put security flags, such as SECURITY_LSM_NATIVE_LABELS, into the filesystem
context so that the filesystem can communicate them to the LSM more easily.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
This commit is contained in:
David Howells 2018-11-01 23:07:24 +00:00 committed by Al Viro
parent 2febd254ad
commit 846e566218
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
include/linux/fs_context.h
View File

@ -85,6 +85,7 @@ struct fs_context {
void *security; /* Linux S&M options */ void *security; /* Linux S&M options */
unsigned int sb_flags; /* Proposed superblock flags (SB_*) */ unsigned int sb_flags; /* Proposed superblock flags (SB_*) */
unsigned int sb_flags_mask; /* Superblock flags that were changed */ unsigned int sb_flags_mask; /* Superblock flags that were changed */
unsigned int lsm_flags; /* Information flags from the fs to the LSM */
enum fs_context_purpose purpose:8; enum fs_context_purpose purpose:8;
bool need_free:1; /* Need to call ops->free() */ bool need_free:1; /* Need to call ops->free() */
}; };

2
include/linux/security.h
View File

@ -61,7 +61,7 @@ enum fs_value_type;
#define SECURITY_CAP_NOAUDIT 0 #define SECURITY_CAP_NOAUDIT 0
#define SECURITY_CAP_AUDIT 1 #define SECURITY_CAP_AUDIT 1
/* LSM Agnostic defines for sb_set_mnt_opts */ /* LSM Agnostic defines for fs_context::lsm_flags */
#define SECURITY_LSM_NATIVE_LABELS 1 #define SECURITY_LSM_NATIVE_LABELS 1
struct ctl_table; struct ctl_table;