| /Linux-v6.1/security/ |
| D | security.c | 103 static bool __init is_enabled(struct lsm_info *lsm) in is_enabled() argument
105 if (!lsm->enabled) in is_enabled()
108 return *lsm->enabled; in is_enabled()
114 static void __init set_enabled(struct lsm_info *lsm, bool enabled) in set_enabled() argument
120 if (!lsm->enabled) { in set_enabled()
122 lsm->enabled = &lsm_enabled_true; in set_enabled()
124 lsm->enabled = &lsm_enabled_false; in set_enabled()
125 } else if (lsm->enabled == &lsm_enabled_true) { in set_enabled()
127 lsm->enabled = &lsm_enabled_false; in set_enabled()
128 } else if (lsm->enabled == &lsm_enabled_false) { in set_enabled()
[all …]
|
| D | Kconfig | 257 controlled at boot with the "lsm=" parameter.
|
| /Linux-v6.1/include/linux/ |
| D | lsm_hooks.h | 1613 const char *lsm; member
1648 const char *lsm);
1670 #define DEFINE_LSM(lsm) \ argument
1671 static struct lsm_info __lsm_##lsm \
1675 #define DEFINE_EARLY_LSM(lsm) \ argument
1676 static struct lsm_info __early_lsm_##lsm \
|
| D | bpf_types.h | 76 BPF_PROG_TYPE(BPF_PROG_TYPE_LSM, lsm,
|
| D | security.h | 467 int security_getprocattr(struct task_struct *p, const char *lsm, const char *name,
469 int security_setprocattr(const char *lsm, const char *name, void *value,
1311 static inline int security_getprocattr(struct task_struct *p, const char *lsm, in security_getprocattr() argument
1317 static inline int security_setprocattr(const char *lsm, char *name, in security_setprocattr() argument
|
| /Linux-v6.1/security/integrity/ima/ |
| D | ima_policy.c | 96 } lsm[MAX_LSM_RULES]; member
359 ima_filter_rule_free(entry->lsm[i].rule); in ima_lsm_free_rule()
360 kfree(entry->lsm[i].args_p); in ima_lsm_free_rule()
393 memset(nentry->lsm, 0, sizeof_field(struct ima_rule_entry, lsm)); in ima_lsm_copy_rule()
396 if (!entry->lsm[i].args_p) in ima_lsm_copy_rule()
399 nentry->lsm[i].type = entry->lsm[i].type; in ima_lsm_copy_rule()
400 nentry->lsm[i].args_p = entry->lsm[i].args_p; in ima_lsm_copy_rule()
406 entry->lsm[i].args_p = NULL; in ima_lsm_copy_rule()
408 ima_filter_rule_init(nentry->lsm[i].type, Audit_equal, in ima_lsm_copy_rule()
409 nentry->lsm[i].args_p, in ima_lsm_copy_rule()
[all …]
|
| /Linux-v6.1/Documentation/security/ |
| D | index.rst | 11 lsm
12 lsm-development
|
| D | lsm.rst | 64 An interface `/sys/kernel/security/lsm` reports a comma separated list
|
| /Linux-v6.1/Documentation/bpf/ |
| D | prog_lsm.rst | 61 * ``"lsm/file_mprotect"`` indicates the LSM hook that the program must
67 SEC("lsm/file_mprotect")
134 `tools/testing/selftests/bpf/progs/lsm.c`_ and the corresponding
140 .. _tools/testing/selftests/bpf/progs/lsm.c:
141 …t.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/tools/testing/selftests/bpf/progs/lsm.c
|
| /Linux-v6.1/security/keys/ |
| D | permission.c | 41 goto lsm; in key_task_permission()
89 lsm: in key_task_permission()
|
| /Linux-v6.1/tools/testing/selftests/bpf/prog_tests/ |
| D | test_lsm.c | 54 static int test_lsm(struct lsm *skel) in test_lsm()
99 struct lsm *skel = NULL; in test_test_lsm()
|
| /Linux-v6.1/security/safesetid/ |
| D | Makefile | 7 safesetid-y := lsm.o securityfs.o
|
| /Linux-v6.1/Documentation/ABI/testing/ |
| D | ima_policy | 24 condition:= base | lsm [option]
28 lsm: [[subj_user=] [subj_role=] [subj_type=]
49 lsm: are LSM specific
|
| /Linux-v6.1/security/apparmor/ |
| D | Makefile | 7 path.o domain.o policy.o policy_unpack.o procattr.o lsm.o \
|
| /Linux-v6.1/Documentation/admin-guide/LSM/ |
| D | index.rst | 26 ``/sys/kernel/security/lsm``. This is a comma separated list, and
|
| /Linux-v6.1/fs/proc/ |
| D | internal.h | 95 const char *lsm; member
|
| D | base.c | 151 { .lsm = LSM })
2733 length = security_getprocattr(task, PROC_I(inode)->op.lsm, in proc_pid_attr_read()
2791 rv = security_setprocattr(PROC_I(inode)->op.lsm, in proc_pid_attr_write()
|
| /Linux-v6.1/Documentation/userspace-api/ |
| D | landlock.rst | 415 still enable it by adding ``lsm=landlock,[...]`` to
|
| /Linux-v6.1/Documentation/admin-guide/ |
| D | kernel-parameters.txt | 2923 lsm.debug [SECURITY] Enable LSM initialization debugging output.
2925 lsm=lsm1,...,lsmN
5535 "lsm=" parameter.
|
| /Linux-v6.1/ |
| D | MAINTAINERS | 11522 T: git https://github.com/landlock-lsm/linux.git
18565 T: git git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm.git
|
