Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1430912

Re: [PATCH v4 3/3] LSM: Add context interface for proc attrs

Show all headers | View raw

On 6/24/2016 12:15 PM, Paul Moore wrote:
> On Thu, Jun 23, 2016 at 5:11 PM, Casey Schaufler <casey@schaufler-ca.com> wrote:
>> Subject: [PATCH v4 3/3] LSM: Add context interface for proc attrs
>>
>> The /proc/.../attr/current interface is used by all three
>> Linux security modules (SELinux, Smack and AppArmor) to
>> report and modify the process security attribute. This is
>> all fine when there is exactly one of these modules active
>> and the userspace code knows which it module it is.
>> It would require a major change to the "current" interface
>> to provide information about more than one set of process
>> security attributes. Instead, a "context" attribute is
>> added, which identifies the security module that the
>> information applies to. The format is:
>>
>>         lsmname='context-value'
>>
>> When multiple concurrent modules are supported the
>> /proc/.../attr/context interface will include the data
>> for all of the active modules.
>>
>>         lsmname1='context-value1'lsmname2='context-value2'
>>
>> The module specific subdirectories under attr contain context
>> entries that report the information for that specific module
>> in the same format.
> I think a delimiter between the different LSMs would be a good idea.
> A comma seems like a safe choice at the moment.

It's unnecessary and makes for more complicated code in
both directions, but everyone seems wedded to a delimiter.
I'll propose a v5 with a delimiter.

>

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH v4 0/3] LSM: module hierarchy in /proc/.../attr Casey Schaufler <casey@schaufler-ca.com> - 2016-06-23 23:10 +0200
  [PATCH v4 1/3] LSM: Add /sys/kernel/security/lsm Casey Schaufler <casey@schaufler-ca.com> - 2016-06-23 23:20 +0200
    Re: [PATCH v4 1/3] LSM: Add /sys/kernel/security/lsm Paul Moore <paul@paul-moore.com> - 2016-06-24 21:00 +0200
  [PATCH v4 2/3] LSM: module hierarchy in /proc/.../attr Casey Schaufler <casey@schaufler-ca.com> - 2016-06-23 23:20 +0200
    Re: [PATCH v4 2/3] LSM: module hierarchy in /proc/.../attr Paul Moore <paul@paul-moore.com> - 2016-06-24 21:20 +0200
      Re: [PATCH v4 2/3] LSM: module hierarchy in /proc/.../attr Kees Cook <keescook@chromium.org> - 2016-06-24 22:10 +0200
        Re: [PATCH v4 2/3] LSM: module hierarchy in /proc/.../attr Paul Moore <paul@paul-moore.com> - 2016-06-24 22:30 +0200
          [PATCH v5 2/3] LSM: module hierarchy in /proc/.../attr Casey Schaufler <casey@schaufler-ca.com> - 2016-06-25 01:30 +0200
            Re: [PATCH v5 2/3] LSM: module hierarchy in /proc/.../attr Paul Moore <paul@paul-moore.com> - 2016-06-29 19:10 +0200
              Re: [PATCH v5 2/3] LSM: module hierarchy in /proc/.../attr John Johansen <john.johansen@canonical.com> - 2016-07-02 19:30 +0200
          [PATCH v5 1/3] LSM: Add /sys/kernel/security/lsm Casey Schaufler <casey@schaufler-ca.com> - 2016-06-25 01:30 +0200
            Re: [PATCH v5 1/3] LSM: Add /sys/kernel/security/lsm Paul Moore <paul@paul-moore.com> - 2016-06-29 19:10 +0200
              Re: [PATCH v5 1/3] LSM: Add /sys/kernel/security/lsm John Johansen <john.johansen@canonical.com> - 2016-07-02 19:30 +0200
          [PATCH v5 0/3] LSM: security module information improvements Casey Schaufler <casey@schaufler-ca.com> - 2016-06-25 01:30 +0200
            [PATCH v5 3/3] LSM: Add context interface for proc attrs Casey Schaufler <casey@schaufler-ca.com> - 2016-06-25 01:40 +0200
            [PATCH v4 3/3] LSM: Add context interface for proc attrs Casey Schaufler <casey@schaufler-ca.com> - 2016-06-25 01:40 +0200
              Re: [PATCH v4 3/3] LSM: Add context interface for proc attrs Paul Moore <paul@paul-moore.com> - 2016-06-29 19:10 +0200
                Re: [PATCH v4 3/3] LSM: Add context interface for proc attrs John Johansen <john.johansen@canonical.com> - 2016-07-02 19:30 +0200
                [PATCH v5 0/3] LSM: security module information improvements - Acked Casey Schaufler <casey@schaufler-ca.com> - 2016-07-05 18:00 +0200
                Re: [PATCH v5 0/3] LSM: security module information improvements -  Acked James Morris <jmorris@namei.org> - 2016-07-08 12:10 +0200
                Re: [PATCH v5 0/3] LSM: security module information improvements -  Acked Casey Schaufler <casey@schaufler-ca.com> - 2016-07-08 17:40 +0200
                [PATCH v5 2/3] LSM: module hierarchy in /proc/.../attr - Acked Casey Schaufler <casey@schaufler-ca.com> - 2016-07-05 18:00 +0200
                [PATCH v5 1/3] LSM: Add /sys/kernel/security/lsm - Acked Casey Schaufler <casey@schaufler-ca.com> - 2016-07-05 18:00 +0200
                [PATCH v5 3/3] LSM: Add context interface for proc attrs - Acked Casey Schaufler <casey@schaufler-ca.com> - 2016-07-05 18:00 +0200
      Re: [PATCH v4 2/3] LSM: module hierarchy in /proc/.../attr Casey Schaufler <casey@schaufler-ca.com> - 2016-06-24 22:10 +0200
  [PATCH v4 3/3] LSM: Add context interface for proc attrs Casey Schaufler <casey@schaufler-ca.com> - 2016-06-23 23:20 +0200
    Re: [PATCH v4 3/3] LSM: Add context interface for proc attrs Kees Cook <keescook@chromium.org> - 2016-06-24 00:00 +0200
      Re: [PATCH v4 3/3] LSM: Add context interface for proc attrs Casey Schaufler <casey@schaufler-ca.com> - 2016-06-24 00:20 +0200
      [PATCH v4 4/3] LSM: Improve context interface for proc attrs Casey Schaufler <casey@schaufler-ca.com> - 2016-06-24 18:40 +0200
        Re: [PATCH v4 4/3] LSM: Improve context interface for proc attrs Kees Cook <keescook@chromium.org> - 2016-06-24 19:50 +0200
    Re: [PATCH v4 3/3] LSM: Add context interface for proc attrs Paul Moore <paul@paul-moore.com> - 2016-06-24 21:20 +0200
      Re: [PATCH v4 3/3] LSM: Add context interface for proc attrs Casey Schaufler <casey@schaufler-ca.com> - 2016-06-24 22:00 +0200

csiph-web