mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs.git
synced 2026-10-30 22:03:17 +01:00
Casey Schaufler
ed870e35db
When more than one security module is exporting data to audit and networking sub-systems a single 32 bit integer is no longer sufficient to represent the data. Add a structure to be used instead. The lsm_prop structure definition is intended to keep the LSM specific information private to the individual security modules. The module specific information is included in a new set of header files under include/lsm. Each security module is allowed to define the information included for its use in the lsm_prop. SELinux includes a u32 secid. Smack includes a pointer into its global label list. The conditional compilation based on feature inclusion is contained in the include/lsm files. Cc: [email protected] Cc: [email protected] Cc: [email protected] Cc: [email protected] Suggested-by: Paul Moore <[email protected]> Signed-off-by: Casey Schaufler <[email protected]> Acked-by: John Johansen <[email protected]> [PM: added include/linux/lsm/ to MAINTAINERS, subj tweak] Signed-off-by: Paul Moore <[email protected]>
18 lines
367 B
C
18 lines
367 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/*
|
|
* Linux Security Module interface to other subsystems.
|
|
* Smack presents a pointer into the global Smack label list.
|
|
*/
|
|
#ifndef __LINUX_LSM_SMACK_H
|
|
#define __LINUX_LSM_SMACK_H
|
|
|
|
struct smack_known;
|
|
|
|
struct lsm_prop_smack {
|
|
#ifdef CONFIG_SECURITY_SMACK
|
|
struct smack_known *skp;
|
|
#endif
|
|
};
|
|
|
|
#endif /* ! __LINUX_LSM_SMACK_H */
|