Vivek Goyal
d8ad8b4961
security, overlayfs: provide copy up security hook for unioned files ...
Provide a security hook to label new file correctly when a file is copied
up from lower layer to upper layer of a overlay/union mount.
This hook can prepare a new set of creds which are suitable for new file
creation during copy up. Caller will use new creds to create file and then
revert back to old creds and release new creds.
Signed-off-by: Vivek Goyal <vgoyal@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
[PM: whitespace cleanup to appease checkpatch.pl]
Signed-off-by: Paul Moore <paul@paul-moore.com>
2016-08-08 20:06:53 -04:00
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
2016-07-27 17:39:26 +10:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2016-07-29 17:38:46 -07:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2016-07-29 17:38:46 -07:00
LSM: LoadPin: provide enablement CONFIG
2016-05-17 20:10:30 +10:00
security: Use IS_ENABLED() instead of checking for built-in or module
2016-08-08 13:08:25 -04:00
security: Use IS_ENABLED() instead of checking for built-in or module
2016-08-08 13:08:25 -04:00
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2016-07-29 17:38:46 -07:00
Yama: fix double-spinlock and user access in atomic context
2016-05-26 09:56:18 +10:00
fs: Treat foreign mounts as nosuid
2016-06-24 10:40:41 -05:00
security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition
2015-09-03 18:13:10 -07:00
securityfs: ->d_parent is never NULL or negative
2016-05-29 16:22:06 -04:00
LSM: LoadPin for kernel file loading restrictions
2016-04-21 10:47:27 +10:00
selinux: print leading 0x on ioctlcmd audits
2016-08-08 13:08:34 -04:00
LSM: LoadPin for kernel file loading restrictions
2016-04-21 10:47:27 +10:00
security, overlayfs: provide copy up security hook for unioned files
2016-08-08 20:06:53 -04:00
d8ad8b4961