Casey Schaufler 6d9c939dbe procfs: add smack subdir to attrs ... Back in 2007 I made what turned out to be a rather serious mistake in the implementation of the Smack security module. The SELinux module used an interface in /proc to manipulate the security context on processes. Rather than use a similar interface, I used the same interface. The AppArmor team did likewise. Now /proc/.../attr/current will tell you the security "context" of the process, but it will be different depending on the security module you're using. This patch provides a subdirectory in /proc/.../attr for Smack. Smack user space can use the "current" file in this subdirectory and never have to worry about getting SELinux attributes by mistake. Programs that use the old interface will continue to work (or fail, as the case may be) as before. The proposed S.A.R.A security module is dependent on the mechanism to create its own attr subdirectory. The original implementation is by Kees Cook. Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Reviewed-by: Kees Cook <keescook@chromium.org> Signed-off-by: Kees Cook <keescook@chromium.org>		2019-01-08 13:18:44 -08:00
..
9p	Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-11-01 19:58:52 -07:00
adfs
affs
afs	fs: don't open code lru_to_page()	2019-01-04 13:13:48 -08:00
autofs	autofs: add strictexpire mount option	2019-01-04 13:13:47 -08:00
befs
bfs	bfs: extra sanity checking and static inode bitmap	2019-01-04 13:13:47 -08:00
btrfs	Merge branch 'mount.part1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-01-05 13:25:58 -08:00
cachefiles	fscache, cachefiles: remove redundant variable 'cache'	2018-11-30 16:00:58 +00:00
ceph	A fairly quiet round: a couple of messenger performance improvements	2019-01-05 13:58:08 -08:00
cifs	three fixes, one for stable, one adds the (most secure) SMB3.1.1 dialect to default list requested	2019-01-05 14:05:06 -08:00
coda
configfs
cramfs	Make the Cramfs code more robust against filesystem corruptions,	2018-10-30 12:46:25 -07:00
crypto	fscrypt: add Adiantum support	2019-01-06 08:36:21 -05:00
debugfs
devpts
dlm	dlm: fix invalid cluster name warning	2018-12-03 15:30:24 -06:00
ecryptfs
efivarfs
efs
exofs	exofs_mount(): fix leaks on failure exits	2018-12-17 18:36:33 -05:00
exportfs	exportfs: do not read dentry after free	2018-11-23 09:08:17 -05:00
ext2	\n	2018-12-27 17:00:35 -08:00
ext4	Fix a number of ext4 bugs.	2019-01-06 12:19:23 -08:00
f2fs	f2fs-for-4.21-rc1	2018-12-31 09:41:37 -08:00
fat	Merge branch 'akpm' (patches from Andrew)	2019-01-05 09:16:18 -08:00
freevxfs
fscache	fscache: fix race between enablement and dropping of object	2018-11-30 15:57:31 +00:00
fuse	mm: convert totalram_pages and totalhigh_pages variables to atomic	2018-12-28 12:11:47 -08:00
gfs2	File locking changes for v4.21	2018-12-27 17:12:30 -08:00
hfs	hfs: do not free node before using	2018-11-30 14:56:14 -08:00
hfsplus	hfsplus: return file attributes on statx	2019-01-04 13:13:47 -08:00
hostfs
hpfs
hugetlbfs	hugetlbfs: Use i_mmap_rwsem to fix page fault/truncate race	2018-12-28 12:11:52 -08:00
isofs
jbd2	jbd2: clean up indentation issue, replace spaces with tab	2018-12-04 00:20:10 -05:00
jffs2	jffs2: Fix use of uninitialized delayed_work, lockdep breakage	2018-12-02 09:20:34 +01:00
jfs
kernfs	kernfs: Improve kernfs_notify() poll notification latency	2018-11-27 11:59:33 +01:00
lockd	NFS client updates for Linux 4.21	2019-01-02 16:35:23 -08:00
minix
nfs	Merge branch 'mount.part1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-01-05 13:25:58 -08:00
nfs_common
nfsd	NFS client updates for Linux 4.21	2019-01-02 16:35:23 -08:00
nilfs2	nilfs2: Use xa_erase_irq	2018-11-05 14:57:05 -05:00
nls
notify	fanotify: Use inode_is_open_for_write	2018-12-11 10:55:45 +01:00
ntfs	mm: convert totalram_pages and totalhigh_pages variables to atomic	2018-12-28 12:11:47 -08:00
ocfs2	Merge branch 'akpm' (patches from Andrew)	2019-01-05 09:16:18 -08:00
omfs
openpromfs	fs/openpromfs: Use of_node_name_eq for node name comparisons	2018-11-18 13:35:19 -08:00
orangefs	fs: don't open code lru_to_page()	2019-01-04 13:13:48 -08:00
overlayfs	Revert "ovl: relax permission checking on underlying layers"	2018-12-04 11:31:30 +01:00
proc	procfs: add smack subdir to attrs	2019-01-08 13:18:44 -08:00
pstore	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
qnx4
qnx6
quota	quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls.	2018-12-18 18:29:15 +01:00
ramfs
reiserfs	reiserfs: remove workaround code for GCC 3.x	2018-10-31 08:54:14 -07:00
romfs
squashfs
sysfs	sysfs: constify sysfs create/remove files harder	2018-12-03 18:18:19 +02:00
sysv	sysv: return 'err' instead of 0 in __sysv_write_inode	2018-11-10 08:02:40 -05:00
tracefs
ubifs	mm: migrate: drop unused argument of migrate_page_move_mapping()	2018-12-28 12:11:51 -08:00
udf	\n	2018-12-27 17:00:35 -08:00
ufs
xfs	xfs: xfs_fsops: drop useless LIST_HEAD	2018-12-29 10:47:58 -08:00
aio.c	Merge branch 'akpm' (patches from Andrew)	2018-12-28 16:55:46 -08:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
binfmt_elf.c
binfmt_elf_fdpic.c
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c	exec: load_script: don't blindly truncate shebang string	2019-01-04 13:13:47 -08:00
block_dev.c	block: don't use un-ordered __set_current_state(TASK_UNINTERRUPTIBLE)	2019-01-02 10:46:03 -08:00
buffer.c	fs/: remove caller signal_pending branch predictions	2019-01-04 13:13:48 -08:00
char_dev.c
compat.c
compat_binfmt_elf.c
compat_ioctl.c	media updates for v4.20-rc1	2018-10-29 14:29:58 -07:00
coredump.c
d_path.c
dax.c	dax fix 4.21	2018-12-31 09:46:39 -08:00
dcache.c	mm: remove include/linux/bootmem.h	2018-10-31 08:54:16 -07:00
dcookies.c
direct-io.c	Linux 4.20-rc5	2018-12-04 09:38:05 -07:00
drop_caches.c
eventfd.c
eventpoll.c	Merge branch 'akpm' (patches from Andrew)	2019-01-05 09:16:18 -08:00
exec.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-01-05 13:18:59 -08:00
fcntl.c
fhandle.c
file.c	Char/Misc driver patches for 4.21-rc1	2018-12-28 20:54:57 -08:00
file_table.c	mm: convert totalram_pages and totalhigh_pages variables to atomic	2018-12-28 12:11:47 -08:00
filesystems.c
fs-writeback.c
fs_pin.c
fs_struct.c
inode.c	y2038: more syscalls and cleanups	2018-12-28 12:45:04 -08:00
internal.h
ioctl.c	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
iomap.c	block: don't use un-ordered __set_current_state(TASK_UNINTERRUPTIBLE)	2019-01-02 10:46:03 -08:00
Kconfig
Kconfig.binfmt
libfs.c
locks.c	locks: fix error in locks_move_blocks()	2019-01-02 20:14:50 -05:00
Makefile
mbcache.c
mount.h
mpage.c
namei.c	Revert "vfs: Allow userns root to call mknod on owned filesystems."	2018-12-22 14:18:34 -08:00
namespace.c	Merge branch 'mount.part1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-01-05 13:25:58 -08:00
no-block.c
nsfs.c
open.c
pipe.c
pnode.c	vfs: Suppress MS_* flag defs within the kernel unless explicitly enabled	2018-12-20 16:32:56 +00:00
pnode.h
posix_acl.c
proc_namespace.c
read_write.c	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
readdir.c	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
select.c	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
seq_file.c
signalfd.c
splice.c	splice: don't read more than available pipe space	2018-12-04 08:50:49 -08:00
stack.c
stat.c
statfs.c
super.c	mount_fs: suppress MAC on MS_SUBMOUNT as well as MS_KERNMOUNT	2018-12-21 11:51:23 -05:00
sync.c
timerfd.c
userfaultfd.c	userfaultfd: clear flag if remap event not enabled	2018-12-28 12:11:51 -08:00
utimes.c
xattr.c