Casey Schaufler d9d8c93938 Smack: Brutalist io_uring support ...

Add Smack privilege checks for io_uring. Use CAP_MAC_OVERRIDE
for the override_creds case and CAP_MAC_ADMIN for creating a
polling thread. These choices are based on conjecture regarding
the intent of the surrounding code.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: make the smack_uring_* funcs static, remove debug code]
Signed-off-by: Paul Moore <paul@paul-moore.com>

2021-09-19 22:40:51 -04:00

..

Kconfig

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

Makefile

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

smack_access.c

Smack: Fix wrong semantics in smk_access_entry()

2021-07-20 09:17:36 -07:00

smack_lsm.c

Smack: Brutalist io_uring support

2021-09-19 22:40:51 -04:00

smack_netfilter.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

smack.h

smack: mark 'smack_enabled' global variable as __initdata

2021-07-20 10:34:59 -07:00

smackfs.c

smackfs: restrict bytes count in smk_set_cipso()

2021-05-10 13:55:08 -07:00