Searched hist:"25354 c4fee169710fd9da15f3bb2abaa24dcf933" (Results 1 – 1 of 1) sorted by relevance
| /openbmc/linux/security/selinux/ |
| H A D | hooks.c | diff 25354c4fee169710fd9da15f3bb2abaa24dcf933 Thu Aug 13 08:45:03 CDT 2009 Eric Paris <eparis@redhat.com> SELinux: add selinux_kernel_module_request
This patch adds a new selinux hook so SELinux can arbitrate if a given
process should be allowed to trigger a request for the kernel to try to
load a module. This is a different operation than a process trying to load
a module itself, which is already protected by CAP_SYS_MODULE.
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
|