Micah Morton 87ca9aaf0c LSM: generalize flag passing to security_capable ... [ Upstream commit c1a85a00ea ] This patch provides a general mechanism for passing flags to the security_capable LSM hook. It replaces the specific 'audit' flag that is used to tell security_capable whether it should log an audit message for the given capability check. The reason for generalizing this flag passing is so we can add an additional flag that signifies whether security_capable is being called by a setid syscall (which is needed by the proposed SafeSetID LSM). Signed-off-by: Micah Morton <mortonm@chromium.org> Reviewed-by: Kees Cook <keescook@chromium.org> Signed-off-by: James Morris <james.morris@microsoft.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-01-23 08:21:29 +01:00
..
Kconfig	Smack: Signal delivery as an append operation	2016-09-08 13:22:56 -07:00
Makefile	Smack: Repair netfilter dependency	2015-01-23 10:08:19 -08:00
smack.h	Smack: Privilege check on key operations	2018-01-10 09:29:14 -08:00
smack_access.c	LSM: generalize flag passing to security_capable	2020-01-23 08:21:29 +01:00
smack_lsm.c	smack: use GFP_NOFS while holding inode_smack::smk_lock	2019-10-07 18:57:27 +02:00
smack_netfilter.c	netfilter: nf_hook_ops structs can be const	2017-07-31 19:10:44 +02:00
smackfs.c	fs: constify tree_descr arrays passed to simple_fill_super()	2017-04-26 23:54:06 -04:00