selinux_init() is not executed in booting in kernel 5.15

Henry Zhang <[email protected]> Fri, 4 Aug 2023 17:51:53 -0700
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <CANTW0yphXfJT6KDaKKuT1NBhJ6AksexJfkCqhx4oEyXOY7bZHw@mail.gmail.com>
--===============2590482582559184056==
Content-Type: multipart/alternative; boundary="0000000000000081560602226c22"

--0000000000000081560602226c22
Content-Type: text/plain; charset="UTF-8"

Hi guys,

I am porting selinux from kernel 4.14 to 5.15. Everything works fine in
kernel 4.14.
keep same /etc/selinux/conf and kernel parameters to enable SELinux.

But the selinux_init() is not executed when kernel 5.15 boots because
no "*SELinux:
Initializing" is seen in dmesg.*

*This selinux_init() is defined in *
http://tomoyo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c

 <https://tomoyo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c#L7287>
DEFINE_LSM <https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=DEFINE_LSM>(selinux)
= {7288 <https://tomoyo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c#L7288>
        .name <https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=name> =
*"selinux"*,7289
<https://tomoyo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c#L7289>
        .flags <https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=flags> =
LSM_FLAG_LEGACY_MAJOR
<https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=LSM_FLAG_LEGACY_MAJOR> |
LSM_FLAG_EXCLUSIVE
<https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=LSM_FLAG_EXCLUSIVE>,7290
<https://tomoyo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c#L7290>
        .enabled <https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=enabled>
= &selinux_enabled_boot
<https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=selinux_enabled_boot>,7291
<https://tomoyo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c#L7291>
        .blobs = &selinux_blob_sizes
<https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=selinux_blob_sizes>,7292
<https://tomoyo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c#L7292>
        .init <https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=init> =
selinux_init <https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=selinux_init>,7293
<https://tomoyo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c#L7293>
};

My question is why the selinux_init() is not called when kernel 5.15 boots up?

---henry

--0000000000000081560602226c22
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><font size=3D"4">Hi guys,</font></div><div><font size=
=3D"4"><br></font></div><div><font size=3D"4">I am porting selinux from ker=
nel 4.14 to 5.15. Everything works fine in kernel 4.14.</font></div><div><f=
ont size=3D"4">keep same /etc/selinux/conf and kernel parameters to enable =
SELinux.</font></div><div><font size=3D"4"><br></font></div><div><font size=
=3D"4">But the selinux_init() is not executed when kernel 5.15 boots becaus=
e no &quot;<i>SELinux:  Initializing&quot; is seen in dmesg.</i></font></di=
v><div><font size=3D"4"><i><br></i></font></div><div><font size=3D"4"><i>Th=
is selinux_init() is defined in </i><a href=3D"http://tomoyo.osdn.jp/cgi-bi=
n/lxr/source/security/selinux/hooks.c">http://tomoyo.osdn.jp/cgi-bin/lxr/so=
urce/security/selinux/hooks.c</a></font></div><div><font size=3D"4"><br></f=
ont></div><div><pre><font size=3D"4"><a name=3D"L7287" href=3D"https://tomo=
yo.osdn.jp/cgi-bin/lxr/source/security/selinux/hooks.c#L7287"></a> <a href=
=3D"https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=3DDEFINE_LSM">DEFINE_LSM</a>=
(selinux) =3D {
<a name=3D"L7288" href=3D"https://tomoyo.osdn.jp/cgi-bin/lxr/source/securit=
y/selinux/hooks.c#L7288">7288</a>         .<a href=3D"https://tomoyo.osdn.j=
p/cgi-bin/lxr/ident?i=3Dname">name</a> =3D <i>&quot;selinux&quot;</i>,
<a name=3D"L7289" href=3D"https://tomoyo.osdn.jp/cgi-bin/lxr/source/securit=
y/selinux/hooks.c#L7289">7289</a>         .<a href=3D"https://tomoyo.osdn.j=
p/cgi-bin/lxr/ident?i=3Dflags">flags</a> =3D <a href=3D"https://tomoyo.osdn=
.jp/cgi-bin/lxr/ident?i=3DLSM_FLAG_LEGACY_MAJOR">LSM_FLAG_LEGACY_MAJOR</a> =
| <a href=3D"https://tomoyo.osdn.jp/cgi-bin/lxr/ident?i=3DLSM_FLAG_EXCLUSIV=
E">LSM_FLAG_EXCLUSIVE</a>,
<a name=3D"L7290" href=3D"https://tomoyo.osdn.jp/cgi-bin/lxr/source/securit=
y/selinux/hooks.c#L7290">7290</a>         .<a href=3D"https://tomoyo.osdn.j=
p/cgi-bin/lxr/ident?i=3Denabled">enabled</a> =3D &amp;<a href=3D"https://to=
moyo.osdn.jp/cgi-bin/lxr/ident?i=3Dselinux_enabled_boot">selinux_enabled_bo=
ot</a>,
<a name=3D"L7291" href=3D"https://tomoyo.osdn.jp/cgi-bin/lxr/source/securit=
y/selinux/hooks.c#L7291">7291</a>         .blobs =3D &amp;<a href=3D"https:=
//tomoyo.osdn.jp/cgi-bin/lxr/ident?i=3Dselinux_blob_sizes">selinux_blob_siz=
es</a>,
<a name=3D"L7292" href=3D"https://tomoyo.osdn.jp/cgi-bin/lxr/source/securit=
y/selinux/hooks.c#L7292">7292</a>         .<a href=3D"https://tomoyo.osdn.j=
p/cgi-bin/lxr/ident?i=3Dinit">init</a> =3D <a href=3D"https://tomoyo.osdn.j=
p/cgi-bin/lxr/ident?i=3Dselinux_init">selinux_init</a>,
<a name=3D"L7293" href=3D"https://tomoyo.osdn.jp/cgi-bin/lxr/source/securit=
y/selinux/hooks.c#L7293">7293</a> };<br><br></font></pre><pre><font size=3D=
"4">My question is why the selinux_init() is not called when kernel 5.15 bo=
ots up?<br><br></font></pre><pre><font size=3D"4">---henry</font><br></pre>=
</div><div><br></div><div>=C2=A0<br></div></div>

--0000000000000081560602226c22--

--===============2590482582559184056==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
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==

--===============2590482582559184056==--