[PATCH] selinux: add hooks for key subsystem

Introduce SELinux hooks to support the access key retention subsystem within the kernel. Incorporate new flask headers from a modified version of the SELinux reference policy, with support for the new security class representing retained keys. Extend the "key_alloc" security hook with a task parameter representing the intended ownership context for the key being allocated. Attach security information to root's default keyrings within the SELinux initialization routine. Has passed David's testsuite.

Michael LeMay committed 20 years ago

Commit d7200241 parent f893afb16 files · +155 −27Browse files

Showing the changes to security/dummy.c (1 of 16 files). Show all

Unified · Split

security/dummy.c+1−1

@@ -860,7 +860,7 @@ static int dummy_setprocattr(struct task_struct p, char name, void *value, siz · 859 unmodified lines
860	860	}
861	861
862	862	#ifdef CONFIG_KEYS
863		−static inline int dummy_key_alloc(struct key *key)
	863	+static inline int dummy_key_alloc(struct key key, struct task_struct ctx)
864	864	{
865	865	return 0;
866	866	}