]> git.baikalelectronics.ru Git - kernel.git/commit
security: selinux: allow per-file labeling for bpffs
authorConnor O'Brien <connoro@google.com>
Fri, 7 Feb 2020 18:01:49 +0000 (10:01 -0800)
committerPaul Moore <paul@paul-moore.com>
Wed, 12 Feb 2020 03:02:54 +0000 (22:02 -0500)
commit458844677101a1fba7b751458bf3144dc89808b4
tree26460de2a33da6426901e6a38bbacaac8fd43d81
parent97b36ba6347dc97e185f6cfc481b36ac27ee90ca
security: selinux: allow per-file labeling for bpffs

Add support for genfscon per-file labeling of bpffs files. This allows
for separate permissions for different pinned bpf objects, which may
be completely unrelated to each other.

Signed-off-by: Connor O'Brien <connoro@google.com>
Signed-off-by: Steven Moreland <smoreland@google.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/hooks.c