Re: [PATCH RFC 12/15] LSM: Allow reservation of netlabel
Paul Moore <[email protected]>
| Newsgroups | org.kernel.vger.audit,org.kernel.vger.linux-kernel,org.kernel.vger.linux-security-module,org.kernel.vger.selinux |
|---|---|
| Message-ID | <[email protected]> |
On Jun 21, 2025 Casey Schaufler <[email protected]> wrote: > > Allow LSMs to request exclusive access to the netlabel facility. > Provide mechanism for LSMs to determine if they have access to > netlabel. Update the current users of netlabel, SELinux and Smack, > to use and respect the exclusive use of netlabel. > > Signed-off-by: Casey Schaufler <[email protected]> > --- > include/linux/lsm_hooks.h | 1 + > security/lsm_init.c | 6 +++++ > security/selinux/hooks.c | 7 +++--- > security/selinux/include/netlabel.h | 5 ++++ > security/selinux/netlabel.c | 4 ++-- > security/smack/smack.h | 5 ++++ > security/smack/smack_lsm.c | 36 +++++++++++++++++++++-------- > security/smack/smackfs.c | 20 +++++++++++++++- > 8 files changed, 69 insertions(+), 15 deletions(-) We discussed this patch in a separate patchset, lore link below. https://lore.kernel.org/linux-security-module/[email protected]/ -- paul-moore.com