[PATCH] selinux: add hooks for key subsystem

Introduce SELinux hooks to support the access key retention subsystem within the kernel. Incorporate new flask headers from a modified version of the SELinux reference policy, with support for the new security class representing retained keys. Extend the "key_alloc" security hook with a task parameter representing the intended ownership context for the key being allocated. Attach security information to root's default keyrings within the SELinux initialization routine. Has passed David's testsuite.

Michael LeMay committed 20 years ago

Commit d7200241 parent f893afb16 files · +155 −27Browse files

Showing the changes to kernel/user.c (1 of 16 files). Show all

Unified · Split

kernel/user.c+1−1

@@ -148,7 +148,7 @@ struct user_struct * alloc_uid(uid_t uid) · 147 unmodified lines
148	148	new->mq_bytes = 0;
149	149	new->locked_shm = 0;
150	150
151		− if (alloc_uid_keyring(new) < 0) {
	151	+ if (alloc_uid_keyring(new, current) < 0) {
152	152	kmem_cache_free(uid_cachep, new);
153	153	return NULL;
154	154	}