David Howells a8478a6029 smack: Implement the watch_key and post_notification hooks ... Implement the watch_key security hook in Smack to make sure that a key grants the caller Read permission in order to set a watch on a key. Also implement the post_notification security hook to make sure that the notification source is granted Write permission by the watch queue. For the moment, the watch_devices security hook is left unimplemented as it's not obvious what the object should be since the queue is global and didn't previously exist. Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Casey Schaufler <casey@schaufler-ca.com>		2020-05-19 15:47:38 +01:00
..
apparmor	.gitignore: add SPDX License Identifier	2020-03-25 11:50:48 +01:00
bpf	bpf: lsm: Initialize the BPF LSM hooks	2020-03-30 01:34:00 +02:00
integrity	Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity	2020-04-02 14:49:46 -07:00
keys	keys: Make the KEY_NEED_* perms an enum rather than a mask	2020-05-19 15:42:22 +01:00
loadpin	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
lockdown	security,lockdown,selinux: implement SELinux lockdown	2019-12-09 17:53:58 -05:00
safesetid	security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()	2019-10-30 08:45:57 -07:00
selinux	selinux: Implement the watch_key security hook	2020-05-19 15:47:15 +01:00
smack	smack: Implement the watch_key and post_notification hooks	2020-05-19 15:47:38 +01:00
tomoyo	.gitignore: add SPDX License Identifier	2020-03-25 11:50:48 +01:00
yama	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
commoncap.c	Merge branch 'next-lsm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2019-07-09 12:24:21 -07:00
device_cgroup.c	device_cgroup: Export devcgroup_check_permission	2019-10-07 15:11:38 -05:00
inode.c	Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-07-19 10:42:02 -07:00
Kconfig	bpf: lsm: Initialize the BPF LSM hooks	2020-03-30 01:34:00 +02:00
Kconfig.hardening	meminit fix	2019-07-28 12:33:15 -07:00
lsm_audit.c	security,lockdown,selinux: implement SELinux lockdown	2019-12-09 17:53:58 -05:00
Makefile	bpf: lsm: Initialize the BPF LSM hooks	2020-03-30 01:34:00 +02:00
min_addr.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
security.c	keys: Make the KEY_NEED_* perms an enum rather than a mask	2020-05-19 15:42:22 +01:00