]> git.baikalelectronics.ru Git - kernel.git/commit
lsm,io_uring: add LSM hooks for the new uring_cmd file op
authorLuis Chamberlain <mcgrof@kernel.org>
Fri, 15 Jul 2022 19:16:22 +0000 (12:16 -0700)
committerPaul Moore <paul@paul-moore.com>
Fri, 26 Aug 2022 15:19:43 +0000 (11:19 -0400)
commitd774f8ba1b6e0de1e2bef0bd6f054e72a14adf6b
treea5d4322412e3fb7e7b372039fca8fbf6841a8893
parent3d7dcb2c5450a57f60c448f42be48fdfe456bfdf
lsm,io_uring: add LSM hooks for the new uring_cmd file op

io-uring cmd support was added through 8c878aa3fcaf ("fs,io_uring:
add infrastructure for uring-cmd"), this extended the struct
file_operations to allow a new command which each subsystem can use
to enable command passthrough. Add an LSM specific for the command
passthrough which enables LSMs to inspect the command details.

This was discussed long ago without no clear pointer for something
conclusive, so this enables LSMs to at least reject this new file
operation.

[0] https://lkml.kernel.org/r/8adf55db-7bab-f59d-d612-ed906b948d19@schaufler-ca.com

Cc: stable@vger.kernel.org
Fixes: 8c878aa3fcaf ("fs,io_uring: add infrastructure for uring-cmd")
Signed-off-by: Luis Chamberlain <mcgrof@kernel.org>
Acked-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/linux/lsm_hook_defs.h
include/linux/lsm_hooks.h
include/linux/security.h
io_uring/uring_cmd.c
security/security.c