Catherine Zhang
877ce7c1b3
[AF_UNIX]: Datagram getpeersec
...
This patch implements an API whereby an application can determine the
label of its peer's Unix datagram sockets via the auxiliary data mechanism of
recvmsg.
Patch purpose:
This patch enables a security-aware application to retrieve the
security context of the peer of a Unix datagram socket. The application
can then use this security context to determine the security context for
processing on behalf of the peer who sent the packet.
Patch design and implementation:
The design and implementation is very similar to the UDP case for INET
sockets. Basically we build upon the existing Unix domain socket API for
retrieving user credentials. Linux offers the API for obtaining user
credentials via ancillary messages (i.e., out of band/control messages
that are bundled together with a normal message). To retrieve the security
context, the application first indicates to the kernel such desire by
setting the SO_PASSSEC option via getsockopt. Then the application
retrieves the security context using the auxiliary data mechanism.
An example server application for Unix datagram socket should look like this:
toggle = 1;
toggle_len = sizeof(toggle);
setsockopt(sockfd, SOL_SOCKET, SO_PASSSEC, &toggle, &toggle_len);
recvmsg(sockfd, &msg_hdr, 0);
if (msg_hdr.msg_controllen > sizeof(struct cmsghdr)) {
cmsg_hdr = CMSG_FIRSTHDR(&msg_hdr);
if (cmsg_hdr->cmsg_len <= CMSG_LEN(sizeof(scontext)) &&
cmsg_hdr->cmsg_level == SOL_SOCKET &&
cmsg_hdr->cmsg_type == SCM_SECURITY) {
memcpy(&scontext, CMSG_DATA(cmsg_hdr), sizeof(scontext));
}
}
sock_setsockopt is enhanced with a new socket option SOCK_PASSSEC to allow
a server socket to receive security context of the peer.
Testing:
We have tested the patch by setting up Unix datagram client and server
applications. We verified that the server can retrieve the security context
using the auxiliary data mechanism of recvmsg.
Signed-off-by: Catherine Zhang <cxzhang@watson.ibm.com>
Acked-by: Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-29 16:58:06 -07:00
..
iseries
[POWERPC] Clean up it_lp_queue.h
2006-06-28 15:18:55 +10:00
8253pit.h
a.out.h
abs_addr.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
agp.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
asm-compat.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
atomic.h
[PATCH] powerpc: native atomic_add_unless
2006-02-24 14:06:02 +11:00
auxvec.h
[PATCH] powerpc: Merge vdso's and add vdso support to 32 bits kernel
2005-11-11 22:25:39 +11:00
backlight.h
[PATCH] Rewritten backlight infrastructure for portable Apple computers
2006-06-25 10:00:59 -07:00
bitops.h
[PATCH] remove powerpc bitops in favor of existing generic bitops
2006-05-24 16:08:58 +10:00
bootx.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
btext.h
[PATCH] powerpc: Unify udbg ( #2 )
2006-01-09 14:49:54 +11:00
bug.h
[PATCH] git-powerpc: WARN was a dumb idea
2006-03-28 20:48:54 +11:00
bugs.h
byteorder.h
cache.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
cacheflush.h
[PATCH] powerpc: Merge cacheflush.h and cache.h
2005-11-10 13:09:22 +11:00
checksum.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
compat.h
[PATCH] powerpc signal __user annotations
2006-02-08 01:03:46 -05:00
cputable.h
[POWERPC] Simplify the code defining the 64-bit CPU features
2006-06-28 15:19:03 +10:00
cputime.h
powerpc: Implement accurate task and CPU time accounting
2006-02-24 14:05:56 +11:00
current.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
dbdma.h
delay.h
[POWERPC] Fix mdelay badness on shared processor partitions
2006-06-21 15:01:33 +10:00
div64.h
dma-mapping.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
dma.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
eeh.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
eeh_event.h
[PATCH] powerpc/pseries: clear PCI failure counter if no new failures
2006-04-22 18:46:13 +10:00
elf.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
emergency-restart.h
errno.h
fcntl.h
firmware.h
[PATCH] powerpc: Rename and export ppc64_firmware_features
2006-03-28 16:45:20 +11:00
floppy.h
[PATCH] random: remove SA_SAMPLE_RANDOM from floppy driver
2006-06-25 10:01:00 -07:00
futex.h
[PATCH] lightweight robust futexes updates
2006-03-27 08:44:49 -08:00
grackle.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
hardirq.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
heathrow.h
powerpc: Fix some #ifndef __KERNEL__ that should be #ifdef
2006-01-09 15:14:05 +11:00
hvcall.h
[POWERPC] check firmware state before suspending
2006-06-15 19:31:27 +10:00
hvconsole.h
[PATCH] powerpc: hvc_console updates
2006-03-28 16:45:26 +11:00
hvcserver.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
hw_irq.h
[PATCH] genirq: add ->retrigger() irq op to consolidate hw_irq_resend()
2006-06-29 10:26:23 -07:00
i8259.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
ibmebus.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
ide.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
immap_86xx.h
[POWERPC] Add 8641 Register space and IRQ definitions.
2006-06-21 15:01:28 +10:00
io.h
Merge branch 'merge'
2006-04-29 16:15:57 +10:00
ioctl.h
ioctls.h
powerpc: remove duplicate ioctl definitions
2005-11-01 14:36:30 +11:00
iommu.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
ipc.h
ipcbuf.h
[PATCH] powerpc: Keep fixing merged ipcbuf.h
2005-11-03 16:58:17 +11:00
ipic.h
[PATCH] powerpc: moved ipic code to arch/powerpc
2006-01-09 14:48:57 +11:00
irq.h
[PATCH] genirq: cleanup: turn ARCH_HAS_IRQ_PER_CPU into CONFIG_IRQ_PER_CPU
2006-06-29 10:26:23 -07:00
kdebug.h
[PATCH] Notify page fault call chain for powerpc
2006-06-26 09:58:22 -07:00
kdump.h
[POWERPC] kdump: Reserve the existing TCE mappings left by the first kernel
2006-06-28 11:59:46 +10:00
kexec.h
[POWERPC] Add the use of the firmware soft-reset-nmi to kdump.
2006-06-28 15:18:52 +10:00
keylargo.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
kmap_types.h
kprobes.h
[PATCH] Notify page fault call chain
2006-06-26 09:58:22 -07:00
linkage.h
lmb.h
[PATCH] powerpc: Remove calculation of io hole
2006-03-22 15:04:30 +11:00
local.h
lppaca.h
[PATCH] Fix sparse parse error in lppaca.h
2006-01-17 17:18:25 -08:00
machdep.h
[POWERPC] kdump: Reserve the existing TCE mappings left by the first kernel
2006-06-28 11:59:46 +10:00
macio.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
mc146818rtc.h
mediabay.h
mman.h
[PATCH] add asm-generic/mman.h
2006-02-15 15:32:22 -08:00
mmu.h
[POWERPC] powerpc: Initialise ppc_md htab pointers earlier
2006-06-28 11:59:47 +10:00
mmu_context.h
[POWERPC] Correct the MAX_CONTEXT definition
2006-06-29 16:16:15 +10:00
mmzone.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
module.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
mpc86xx.h
Merge branch 'for_paulus' of master.kernel.org:/pub/scm/linux/kernel/git/galak/powerpc
2006-06-28 16:10:53 +10:00
mpic.h
[POWERPC] mpic: add support for serial mode interrupts
2006-06-21 15:01:32 +10:00
msgbuf.h
mutex.h
[PATCH] mutex subsystem, add default include/asm-*/mutex.h files
2006-01-09 15:59:19 -08:00
namei.h
nvram.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
of_device.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
ohare.h
powerpc: Fix some #ifndef __KERNEL__ that should be #ifdef
2006-01-09 15:14:05 +11:00
oprofile_impl.h
[PATCH] powerpc: Remove oprofile spinlock backtrace code
2006-03-29 13:44:16 +11:00
paca.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
page.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
page_32.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
page_64.h
[PATCH] powerpc: Fix pagetable bloat for hugepages
2006-04-28 15:02:51 +10:00
param.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
parport.h
[PATCH] powerpc: parallel port init fix
2006-01-11 14:49:24 +11:00
pci-bridge.h
[POWERPC] pcibus_to_node fixes
2006-06-15 19:31:26 +10:00
pci.h
[PATCH] 64bit resource: change pci core and arch code to use resource_size_t
2006-06-27 09:24:00 -07:00
percpu.h
[PATCH] Define __raw_get_cpu_var and use it
2006-06-25 10:01:01 -07:00
pgalloc.h
[PATCH] powerpc: Fix pagetable bloat for hugepages
2006-04-28 15:02:51 +10:00
pgtable-4k.h
powerpc: Use 64k pages without needing cache-inhibited large pages
2006-06-15 10:45:18 +10:00
pgtable-64k.h
powerpc: Use 64k pages without needing cache-inhibited large pages
2006-06-15 10:45:18 +10:00
pgtable.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
pmac_feature.h
[PATCH] powerpc: Kill _machine and hard-coded platform numbers
2006-03-28 23:15:54 +11:00
pmac_low_i2c.h
[PATCH] 3/5 powerpc: Add platform functions interpreter
2006-01-09 15:47:18 +11:00
pmac_pfunc.h
[PATCH] powerpc: enable irq's for platform functions.
2006-02-01 08:53:10 -08:00
pmc.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
poll.h
[PATCH] POLLRDHUP/EPOLLRDHUP handling for half-closed devices notifications
2006-03-25 08:22:56 -08:00
posix_types.h
ppc-pci.h
[PATCH] powerpc: properly configure DDR/P5IOC children devs
2006-03-16 16:55:07 +11:00
ppc_asm.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
processor.h
[POWERPC] disable floating point exceptions for init
2006-06-21 15:01:33 +10:00
prom.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
pSeries_reconfig.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
ptrace.h
[PATCH] powerpc: enable PPC_PTRACE_[GS]ETREGS on ppc32
2006-06-09 21:20:51 +10:00
reg.h
[POWERPC] cell: add RAS support
2006-06-21 15:01:29 +10:00
reg_8xx.h
[PATCH] powerpc: Merge cacheflush.h and cache.h
2005-11-10 13:09:22 +11:00
resource.h
rtas.h
[POWERPC] Setup RTAS values earlier, to enable rtas_call() earlier
2006-06-28 11:59:48 +10:00
rtc.h
rwsem.h
[PATCH] powerpc: trivial: modify comments to refer to new location of files
2006-02-10 16:53:51 +11:00
scatterlist.h
seccomp.h
powerpc: Fix some #ifndef __KERNEL__ that should be #ifdef
2006-01-09 15:14:05 +11:00
sections.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
semaphore.h
sembuf.h
serial.h
powerpc: Introduce a new config symbol to control 16550 early debug code
2006-01-10 16:19:05 +11:00
setup.h
shmbuf.h
shmparam.h
sigcontext.h
powerpc: merge sigcontext.h
2005-11-03 16:24:25 +11:00
siginfo.h
signal.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
smp.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
smu.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
socket.h
[AF_UNIX]: Datagram getpeersec
2006-06-29 16:58:06 -07:00
sockios.h
sparsemem.h
[PATCH] powerpc: sanitize header files for user space includes
2006-01-09 15:13:08 +11:00
spinlock.h
[PATCH] powerpc: use lwsync in atomics, bitops, lock functions
2006-01-13 21:18:50 +11:00
spinlock_types.h
spu.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
spu_csa.h
[POWERPC] spufs: one more fix for 64k pages
2006-06-21 15:01:32 +10:00
spu_priv1.h
[POWERPC] spufs: fix spu irq affinity setting
2006-06-21 15:01:31 +10:00
sstep.h
stat.h
powerpc: merge stat.h
2005-11-03 16:02:23 +11:00
statfs.h
string.h
powerpc: fix strncasecmp prototype
2006-03-25 09:41:40 -08:00
synch.h
[PATCH] powerpc: newline for ISYNC_ON_SMP
2006-02-24 14:06:00 +11:00
syscalls.h
[PATCH] powerpc: declare arch syscalls in <asm/syscalls.h>
2006-03-27 14:48:22 +11:00
systbl.h
[POWERPC] Unify ppc syscall tables
2006-06-21 15:01:32 +10:00
system.h
[NET]: Allow skb headroom to be overridden
2006-03-31 02:27:06 -08:00
tce.h
[PATCH] powerpc: kill union tce_entry
2006-04-29 18:07:54 +10:00
termbits.h
[PATCH] Add CMSPAR to termbits.h for powerpc and alpha
2006-05-26 11:55:46 -07:00
termios.h
powerpc: use asm-generic/termios.h
2005-11-01 14:36:55 +11:00
thread_info.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
time.h
[POWERPC] update asm-powerpc/time.h
2006-06-28 15:18:56 +10:00
timex.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
tlb.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
tlbflush.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
todc.h
[POWERPC] todc: add support for Time-Of-Day-Clock
2006-06-29 16:22:46 +10:00
topology.h
[PATCH] sched: mc/smt power savings sched policy
2006-06-27 17:32:45 -07:00
tsi108.h
[POWERPC] Add tsi108 pci and platform device data register function
2006-06-29 16:20:36 +10:00
types.h
Don't include linux/config.h from anywhere else in include/
2006-04-26 12:56:16 +01:00
uaccess.h
powerpc: Fix incorrect might_sleep in __get_user/__put_user on kernel addresses
2006-05-03 23:06:46 +10:00
ucontext.h
powerpc: merge ucontext.h
2005-11-03 16:59:17 +11:00
udbg.h
[POWERPC] Add udbg support for RTAS console
2006-06-28 11:59:48 +10:00
unaligned.h
uninorth.h
unistd.h
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6
2006-05-24 09:22:21 +01:00
user.h
vdso.h
[PATCH] powerpc: Make the vDSO functions set error code ( #2 )
2005-11-16 14:05:11 +11:00
vdso_datapage.h
[PATCH] powerpc: Kill _machine and hard-coded platform numbers
2006-03-28 23:15:54 +11:00
vga.h
[PATCH] vgacon: make VGA_MAP_MEM take size, remove extra use
2006-06-22 15:05:58 -07:00
vio.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
2006-06-22 22:11:30 -07:00
xmon.h
powerpc: Simplify and clean up the xmon terminal I/O
2005-11-08 22:55:08 +11:00
xor.h