[PATCH] selinux: add hooks for key subsystem

Introduce SELinux hooks to support the access key retention subsystem within the kernel. Incorporate new flask headers from a modified version of the SELinux reference policy, with support for the new security class representing retained keys. Extend the "key_alloc" security hook with a task parameter representing the intended ownership context for the key being allocated. Attach security information to root's default keyrings within the SELinux initialization routine. Has passed David's testsuite.

Michael LeMay committed 20 years ago

Commit d7200241 parent f893afb16 files · +155 −27Browse files

Showing the changes to kernel/user.c (1 of 16 files). Show all

Unified · Split

kernel/user.c+1−1

@@ -148,7 +148,7 @@ struct user_struct * alloc_uid(uid_t uid) · 147 unmodified lines
148	new->mq_bytes = 0;	148	new->mq_bytes = 0;
149	new->locked_shm = 0;	149	new->locked_shm = 0;
150		150
151	if (alloc_uid_keyring(new) < 0) {	151	if (alloc_uid_keyring(new, current) < 0) {
152	kmem_cache_free(uid_cachep, new);	152	kmem_cache_free(uid_cachep, new);
153	return NULL;	153	return NULL;
154	}	154	}