| /Linux-v5.4/drivers/memory/tegra/ |
| D | tegra186.c | 23 unsigned int security; member
33 .security = 0x004,
40 .security = 0x074,
47 .security = 0x0ac,
54 .security = 0x0b4,
61 .security = 0x0e4,
68 .security = 0x0fc,
75 .security = 0x13c,
82 .security = 0x15c,
89 .security = 0x18c,
[all …]
|
| /Linux-v5.4/Documentation/security/ |
| D | lsm.rst | 20 implemented as its own particular kernel patch. Several other security
25 patch to support its security needs.
28 remarks that described a security framework he would be willing to
30 general framework that would provide a set of security hooks to control
31 operations on kernel objects and a set of opaque security fields in
32 kernel data structures for maintaining security attributes. This
34 desired model of security. Linus also suggested the possibility of
38 such a framework. LSM is a joint development effort by several security
44 of the framework and the example capabilities security module provided
51 security modules. In particular, the LSM framework is primarily focused
[all …]
|
| /Linux-v5.4/Documentation/driver-api/nvdimm/ |
| D | security.rst | 9 specification [1], security DSMs are introduced. The spec added the following
10 security DSMs: "get security state", "set passphrase", "disable passphrase",
12 data structure has been added to struct dimm in order to support the security
17 The "security" sysfs attribute is provided in the nvdimm sysfs directory. For
19 /sys/devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0012:00/ndbus0/nmem0/security
21 The "show" attribute of that attribute will display the security state for
23 frozen, and overwrite. If security is not supported, the sysfs attribute
27 in order to support some of the security functionalities:
29 disable <keyid> - disable enabled security and remove key.
30 freeze - freeze changing of security states.
[all …]
|
| /Linux-v5.4/security/integrity/evm/ |
| D | Kconfig | 11 EVM protects a file's security extended attributes against
37 In addition to the original security xattrs (eg. security.selinux,
38 security.SMACK64, security.capability, and security.ima) included
40 Smack xattrs: security.SMACK64EXEC, security.SMACK64TRANSMUTE and
41 security.SMACK64MMAP.
56 /sys/kernel/security/integrity/evm/evm_xattrs.
|
| /Linux-v5.4/Documentation/netlabel/ |
| D | introduction.rst | 12 NetLabel is a mechanism which can be used by kernel security modules to attach
13 security attributes to outgoing network packets generated from user space
14 applications and read security attributes from incoming network packets. It
16 layer, and the kernel security module API.
22 network packet's security attributes. If any translation between the network
23 security attributes and those on the host are required then the protocol
26 the NetLabel kernel security module API described below.
44 The purpose of the NetLabel security module API is to provide a protocol
46 to protocol independence, the security module API is designed to be completely
50 Detailed information about the NetLabel security module API can be found in the
|
| D | lsm_interface.rst | 12 NetLabel is a mechanism which can set and retrieve security attributes from
15 The NetLabel security module API is defined in 'include/net/netlabel.h' but a
22 it uses the concept of security attributes to refer to the packet's security
23 labels. The NetLabel security attributes are defined by the
25 NetLabel subsystem converts the security attributes to and from the correct
28 security attributes into whatever security identifiers are in use for their
44 label and the internal LSM security identifier can be time consuming. The
47 LSM has received a packet, used NetLabel to decode its security attributes,
48 and translated the security attributes into a LSM internal identifier the LSM
|
| D | cipso_ipv4.rst | 27 label by using the NetLabel security module API; if the NetLabel "domain" is
37 NetLabel security module API to extract the security attributes of the packet.
44 The CIPSO/IPv4 protocol engine contains a mechanism to translate CIPSO security
49 different security attribute mapping table.
54 The NetLabel system provides a framework for caching security attribute
|
| /Linux-v5.4/Documentation/admin-guide/ |
| D | security-bugs.rst | 6 Linux kernel developers take security very seriously. As such, we'd
7 like to know when a security bug is found so that it can be fixed and
8 disclosed as quickly as possible. Please report security bugs to the
9 Linux kernel security team.
14 The Linux kernel security team can be contacted by email at
15 <security@kernel.org>. This is a private list of security officers
19 security team will bring in extra help from area maintainers to
20 understand and fix the security vulnerability.
32 The security list is not a disclosure channel. For that, see Coordination
55 information submitted to the security list and any followup discussions
[all …]
|
| /Linux-v5.4/security/selinux/ |
| D | xfrm.c | 67 return selinux_authorizable_ctx(x->security); in selinux_authorizable_xfrm()
182 if (!xp->security) in selinux_xfrm_state_pol_flow_match()
183 if (x->security) in selinux_xfrm_state_pol_flow_match()
190 if (!x->security) in selinux_xfrm_state_pol_flow_match()
198 state_sid = x->security->ctx_sid; in selinux_xfrm_state_pol_flow_match()
223 return x->security->ctx_sid; in selinux_xfrm_skb_sid_egress()
238 struct xfrm_sec_ctx *ctx = x->security; in selinux_xfrm_skb_sid_ingress()
336 return selinux_xfrm_alloc_user(&x->security, uctx, GFP_KERNEL); in selinux_xfrm_state_alloc()
374 x->security = ctx; in selinux_xfrm_state_alloc_acquire()
386 selinux_xfrm_free(x->security); in selinux_xfrm_state_free()
[all …]
|
| /Linux-v5.4/Documentation/admin-guide/LSM/ |
| D | apparmor.rst | 8 AppArmor is MAC style security extension for the Linux kernel. It implements
19 If AppArmor should be selected as the default security module then set::
26 If AppArmor is not the default security module it can be enabled by passing
27 ``security=apparmor`` on the kernel's command line.
29 If AppArmor is the default security module it can be disabled by passing
30 ``apparmor=0, security=XXXX`` (where ``XXXX`` is valid security module), on the
|
| D | index.rst | 6 various security checks to be hooked by new kernel extensions. The name
10 ``"security=..."`` kernel command line argument, in the case where multiple
14 (MAC) extensions which provide a comprehensive security policy. Examples
25 A list of the active security modules can be found by reading
26 ``/sys/kernel/security/lsm``. This is a comma separated list, and
32 Process attributes associated with "major" security modules should
34 A security module may maintain a module specific subdirectory there,
36 security module and contains all its special files. The files directly
|
| D | tomoyo.rst | 21 Build the kernel with ``CONFIG_SECURITY_TOMOYO=y`` and pass ``security=tomoyo`` on
39 TOMOYO Linux: pragmatic and manageable security for Linux
47 The role of "pathname based access control" in security.
57 We believe that inode based security and name based security are complementary
|
| /Linux-v5.4/security/ |
| D | Kconfig | 8 source "security/keys/Kconfig"
23 bool "Enable different security models"
27 This allows you to choose different security modules to be
30 If this option is not selected, the default Linux security
44 various security modules (AppArmor, IMA, SafeSetID, TOMOYO, TPM).
52 This enables the socket and networking security hooks.
53 If enabled, a security module can use these hooks to
72 This enables the Infiniband security hooks.
73 If enabled, a security module can use these hooks to
81 This enables the XFRM (IPSec) networking security hooks.
[all …]
|
| D | security.c | 496 cred->security = NULL; in lsm_cred_alloc()
500 cred->security = kzalloc(blob_sizes.lbs_cred, gfp); in lsm_cred_alloc()
501 if (cred->security == NULL) in lsm_cred_alloc()
573 task->security = NULL; in lsm_task_alloc()
577 task->security = kzalloc(blob_sizes.lbs_task, GFP_KERNEL); in lsm_task_alloc()
578 if (task->security == NULL) in lsm_task_alloc()
594 kip->security = NULL; in lsm_ipc_alloc()
598 kip->security = kzalloc(blob_sizes.lbs_ipc, GFP_KERNEL); in lsm_ipc_alloc()
599 if (kip->security == NULL) in lsm_ipc_alloc()
615 mp->security = NULL; in lsm_msg_msg_alloc()
[all …]
|
| /Linux-v5.4/Documentation/process/ |
| D | embargoed-hardware-issues.rst | 7 Hardware issues which result in security problems are a different category
8 of security bugs than pure software bugs which only affect the Linux
23 The Linux kernel hardware security team is separate from the regular Linux
24 kernel security team.
26 The team only handles the coordination of embargoed hardware security
27 issues. Reports of pure software security bugs in the Linux kernel are not
29 Linux kernel security team (:ref:`Documentation/admin-guide/
32 The team can be contacted by email at <hardware-security@kernel.org>. This
33 is a private list of security officers who will help you to coordinate an
41 While hardware security issues are often handled by the affected hardware
[all …]
|
| /Linux-v5.4/Documentation/ABI/testing/ |
| D | evm | 1 What: security/evm
5 EVM protects a file's security extended attributes(xattrs)
8 value as the extended attribute 'security.evm'.
10 EVM supports two classes of security.evm. The first is
49 or validate the 'security.evm' xattr, but returns
56 Documentation/security/keys/trusted-encrypted.rst. Both
61 What: security/integrity/evm/evm_xattrs
|
| /Linux-v5.4/drivers/acpi/nfit/ |
| D | Kconfig | 18 bool "Enable debug for NVDIMM security commands"
22 other security features. The payloads for the commands that
24 security material. Disable debug of those command payloads
26 on NVDIMM security enabling say Y, otherwise say N.
|
| /Linux-v5.4/Documentation/filesystems/caching/ |
| D | cachefiles.txt | 23 (*) A note on security.
314 CacheFiles is implemented to deal properly with the LSM security features of
319 security context that is not appropriate for accessing the cache - either
324 The way CacheFiles works is to temporarily change the security context (fsuid,
325 fsgid and actor security label) that the process acts as - without changing the
326 security context of the process when it the target of an operation performed by
332 (1) Finds the security label attached to the root cache directory and uses
333 that as the security label with which it will create files. By default,
338 (2) Finds the security label of the process which issued the bind request
343 and asks LSM to supply a security ID as which it should act given the
[all …]
|
| /Linux-v5.4/fs/9p/ |
| D | Kconfig | 39 implemented by security modules like SELinux. This option
40 enables an extended attribute handler for file security
43 If you are not using a security module that requires using
44 extended attributes for file security labels, say N.
|
| /Linux-v5.4/fs/ext2/ |
| D | Kconfig | 36 implemented by security modules like SELinux. This option
37 enables an extended attribute handler for file security
40 If you are not using a security module that requires using
41 extended attributes for file security labels, say N.
|
| /Linux-v5.4/net/rxrpc/ |
| D | security.c | 91 conn->security = sec; in rxrpc_init_client_conn_security()
93 ret = conn->security->init_connection_security(conn); in rxrpc_init_client_conn_security()
95 conn->security = &rxrpc_no_security; in rxrpc_init_client_conn_security()
158 conn->security = sec; in rxrpc_init_server_conn_security()
|
| /Linux-v5.4/fs/ceph/ |
| D | Kconfig | 45 implemented by security modules like SELinux. This option
46 enables an extended attribute handler for file security
49 If you are not using a security module that requires using
50 extended attributes for file security labels, say N.
|
| /Linux-v5.4/Documentation/translations/zh_CN/ |
| D | SecurityBugs | 1 Chinese translated version of Documentation/admin-guide/security-bugs.rst
11 Documentation/admin-guide/security-bugs.rst 的中文翻译
30 linux内核安全团队可以通过email<security@kernel.org>来联系。这是
|
| /Linux-v5.4/fs/jfs/ |
| D | Kconfig | 27 implemented by security modules like SELinux. This option
28 enables an extended attribute handler for file security
31 If you are not using a security module that requires using
32 extended attributes for file security labels, say N.
|
| /Linux-v5.4/drivers/char/tpm/ |
| D | Kconfig | 13 If you have a TPM security chip in your system, which
52 If you have a TPM security chip that is compliant with the
63 If you have a TPM security chip which is connected to a regular,
74 If you have an Atmel I2C TPM security chip say Yes and it will be
83 If you have a TPM security chip that is compliant with the
94 If you have a TPM security chip with an I2C interface from
104 If you have a TPM security chip from National Semiconductor
113 If you have a TPM security chip from Atmel say Yes and it
121 If you have a TPM security chip from Infineon Technologies
153 If you have a TPM security chip that is compliant with the
|
