projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 89d4d7c) | patch
security: selinux: allow per-file labeling for bpffs
authorConnor O'Brien <connoro@google.com>
Fri, 7 Feb 2020 18:01:49 +0000 (10:01 -0800)
committerPaul Moore <paul@paul-moore.com>
Wed, 12 Feb 2020 03:02:54 +0000 (22:02 -0500)
commit4ca54d3d3022ce27170b50e4bdecc3a42f05dbdc
tree26460de2a33da6426901e6a38bbacaac8fd43d81tree | snapshot
parent89d4d7c88d2b4f252adb434a28ea9b84d629aeb1commit | diff
security: selinux: allow per-file labeling for bpffs

Add support for genfscon per-file labeling of bpffs files. This allows
for separate permissions for different pinned bpf objects, which may
be completely unrelated to each other.

Signed-off-by: Connor O'Brien <connoro@google.com>
Signed-off-by: Steven Moreland <smoreland@google.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/hooks.c diff | blob | history
Domain: System / Kernel;