linux-stable/tools/testing/selftests/lsm
Deven Bowers 0311507792 lsm: add IPE lsm
Integrity Policy Enforcement (IPE) is an LSM that provides an
complimentary approach to Mandatory Access Control than existing LSMs
today.

Existing LSMs have centered around the concept of access to a resource
should be controlled by the current user's credentials. IPE's approach,
is that access to a resource should be controlled by the system's trust
of a current resource.

The basis of this approach is defining a global policy to specify which
resource can be trusted.

Signed-off-by: Deven Bowers <deven.desai@linux.microsoft.com>
Signed-off-by: Fan Wu <wufan@linux.microsoft.com>
[PM: subject line tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
2024-08-19 22:36:26 -04:00
..
.gitignore LSM: selftests for Linux Security Module syscalls 2023-11-12 22:54:42 -05:00
common.c LSM: selftests for Linux Security Module syscalls 2023-11-12 22:54:42 -05:00
common.h lsm: use 32-bit compatible data types in LSM syscalls 2024-03-14 11:31:26 -04:00
config LSM: selftests for Linux Security Module syscalls 2023-11-12 22:54:42 -05:00
lsm_get_self_attr_test.c lsm: use 32-bit compatible data types in LSM syscalls 2024-03-14 11:31:26 -04:00
lsm_list_modules_test.c lsm: add IPE lsm 2024-08-19 22:36:26 -04:00
lsm_set_self_attr_test.c lsm: use 32-bit compatible data types in LSM syscalls 2024-03-14 11:31:26 -04:00
Makefile LSM: selftests for Linux Security Module syscalls 2023-11-12 22:54:42 -05:00