Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1505874

[PATCH 5/8] CaitSith: Add LSM adapter functions.

Show all headers | View raw

This version implements only execve() related LSM hooks.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
---
 security/caitsith/lsm.c | 60 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)
 create mode 100644 security/caitsith/lsm.c

diff --git a/security/caitsith/lsm.c b/security/caitsith/lsm.c
new file mode 100644
index 0000000..675cee8
--- /dev/null
+++ b/security/caitsith/lsm.c
@@ -0,0 +1,60 @@
+/*
+ * security/caitsith/lsm.c
+ *
+ * Copyright (C) 2010-2013  Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
+ */
+
+#include <linux/lsm_hooks.h>
+#include "caitsith.h"
+
+/**
+ * caitsith_bprm_set_creds - Target for security_bprm_set_creds().
+ *
+ * @bprm: Pointer to "struct linux_binprm".
+ *
+ * Returns 0 on success, negative value otherwise.
+ */
+static int caitsith_bprm_set_creds(struct linux_binprm *bprm)
+{
+	/*
+	 * Do only if this function is called for the first time of an execve
+	 * operation.
+	 */
+	if (bprm->cred_prepared)
+		return 0;
+#ifndef CONFIG_SECURITY_CAITSITH_OMIT_USERSPACE_LOADER
+	/*
+	 * Load policy if /sbin/caitsith-init exists and /sbin/init is requested
+	 * for the first time.
+	 */
+	if (!cs_policy_loaded)
+		cs_load_policy(bprm->filename);
+#endif
+	return cs_start_execve(bprm);
+}
+
+/*
+ * caitsith_security_ops is a "struct security_operations" which is used for
+ * registering CaitSith.
+ */
+static struct security_hook_list caitsith_hooks[] = {
+	LSM_HOOK_INIT(bprm_set_creds, caitsith_bprm_set_creds),
+};
+
+/**
+ * caitsith_init - Register CaitSith as a LSM module.
+ *
+ * Returns 0.
+ */
+static int __init caitsith_init(void)
+{
+	if (!security_module_enable("caitsith"))
+		return 0;
+	/* register ourselves with the security framework */
+	security_add_hooks(caitsith_hooks, ARRAY_SIZE(caitsith_hooks));
+	printk(KERN_INFO "CaitSith initialized\n");
+	cs_init_module();
+	return 0;
+}
+
+security_initcall(caitsith_init);
-- 
1.8.3.1

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH 0/8] CaitSith LSM module Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-21 14:50 +0200
  [PATCH 7/8] CaitSith: Add garbage collector functions. Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-21 15:00 +0200
  [PATCH 2/8] CaitSith: Add pathname calculation functions. Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-21 15:00 +0200
  [PATCH 5/8] CaitSith: Add LSM adapter functions. Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-21 15:00 +0200
  [PATCH 6/8] CaitSith: Add policy loader functions. Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-21 15:00 +0200
  [PATCH 4/8] CaitSith: Add permission check functions. Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-21 15:00 +0200
  [PATCH 8/8] CaitSith: Add Kconfig and Makefile Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-21 15:00 +0200
  [PATCH 1/8] CaitSith: Add header file. Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-21 15:00 +0200
  Re: [PATCH 0/8] CaitSith LSM module James Morris <jmorris@namei.org> - 2016-10-24 06:50 +0200
    Re: [PATCH 0/8] CaitSith LSM module John Johansen <john.johansen@canonical.com> - 2016-10-24 16:40 +0200
  Re: [PATCH 0/8] CaitSith LSM module John Johansen <john.johansen@canonical.com> - 2016-10-24 20:20 +0200
    Re: [PATCH 0/8] CaitSith LSM module Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2016-10-25 13:30 +0200

csiph-web