Searched hist:"62874 c3adf709b884ceb0c61c35ab3794b3b0e95" (Results 1 – 1 of 1) sorted by relevance
| /openbmc/linux/security/selinux/ |
| H A D | hooks.c | diff 62874c3adf709b884ceb0c61c35ab3794b3b0e95 Tue Jul 18 17:25:25 CDT 2017 Kees Cook <keescook@chromium.org> selinux: Refactor to remove bprm_secureexec hook
The SELinux bprm_secureexec hook can be merged with the bprm_set_creds
hook since it's dealing with the same information, and all of the details
are finalized during the first call to the bprm_set_creds hook via
prepare_binprm() (subsequent calls due to binfmt_script, etc, are ignored
via bprm->called_set_creds).
Here, the test can just happen at the end of the bprm_set_creds hook,
and the bprm_secureexec hook can be dropped.
Cc: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Paul Moore <paul@paul-moore.com>
Tested-by: Paul Moore <paul@paul-moore.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Reviewed-by: Andy Lutomirski <luto@kernel.org>
|