On Jun 21, 2025 Casey Schaufler <[email protected]> wrote: > > Allow LSMs to request exclusive access to the netlabel facility. > Provide mechanism for LSMs to determine if they have access to > netlabel. Update the current users of netlabel, SELinux and Smack, > to use and respect the exclusive use of netlabel. > > Signed-off-by: Casey Schaufler <[email protected]> > --- > include/linux/lsm_hooks.h | 1 + > security/lsm_init.c | 6 +++++ > security/selinux/hooks.c | 7 +++--- > security/selinux/include/netlabel.h | 5 ++++ > security/selinux/netlabel.c | 4 ++-- > security/smack/smack.h | 5 ++++ > security/smack/smack_lsm.c | 36 +++++++++++++++++++++-------- > security/smack/smackfs.c | 20 +++++++++++++++- > 8 files changed, 69 insertions(+), 15 deletions(-)
We discussed this patch in a separate patchset, lore link below. https://lore.kernel.org/linux-security-module/[email protected]/ -- paul-moore.com
