Re: [PATCH v8 2/3] Teach SELinux about anonymous inodes

2020-08-31 Thread Lokesh Gidra
On Mon, Aug 31, 2020 at 11:05 AM Stephen Smalley wrote: > > On Thu, Aug 27, 2020 at 2:35 AM Lokesh Gidra wrote: > > > > From: Daniel Colascione > > > > This change uses the anon_inodes and LSM infrastructure introduced in > > the previous patch to give SELinux the ability to control > >

Re: [PATCH v8 2/3] Teach SELinux about anonymous inodes

2020-08-31 Thread Stephen Smalley
On Thu, Aug 27, 2020 at 2:35 AM Lokesh Gidra wrote: > > From: Daniel Colascione > > This change uses the anon_inodes and LSM infrastructure introduced in > the previous patch to give SELinux the ability to control > anonymous-inode files that are created using the new anon_inode_getfd_secure() >

[PATCH v8 2/3] Teach SELinux about anonymous inodes

2020-08-27 Thread Lokesh Gidra
From: Daniel Colascione This change uses the anon_inodes and LSM infrastructure introduced in the previous patch to give SELinux the ability to control anonymous-inode files that are created using the new anon_inode_getfd_secure() function. A SELinux policy author detects and controls these