LSM: Plumb visibility into optional "enabled" state
authorKees Cook <keescook@chromium.org>
Fri, 14 Sep 2018 05:28:48 +0000 (22:28 -0700)
committerKees Cook <keescook@chromium.org>
Tue, 8 Jan 2019 21:18:42 +0000 (13:18 -0800)
commitc5459b829b716dafd226ad270f25c9a3050f7586
tree30b2d5de7327a8b6a5532e8a017b641c6684f6b2
parent657d910b52a38c5e0d753c2a5448c6ae26ec85d0
LSM: Plumb visibility into optional "enabled" state

In preparation for lifting the "is this LSM enabled?" logic out of the
individual LSMs, pass in any special enabled state tracking (as needed
for SELinux, AppArmor, and LoadPin). This should be an "int" to include
handling any future cases where "enabled" is exposed via sysctl which
has no "bool" type.

Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: John Johansen <john.johansen@canonical.com>
include/linux/lsm_hooks.h
security/apparmor/lsm.c
security/selinux/hooks.c