Casey Schaufler d787e4c3ac lsm: infrastructure management of the sock security ...

[ Upstream commit 2aff9d20d5 ]

Move management of the sock->sk_security blob out
of the individual security modules and into the security
infrastructure. Instead of allocating the blobs from within
the modules the modules tell the infrastructure how much
space is required, and the space is allocated there.

Acked-by: Paul Moore <paul@paul-moore.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: John Johansen <john.johansen@canonical.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subject tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Stable-dep-of: 56acfeb100 ("selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()")
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-08-03 11:15:36 +02:00

..

Kconfig

…

Makefile

…

smack_access.c

…

smack_lsm.c

lsm: infrastructure management of the sock security

2026-08-03 11:15:36 +02:00

smack_netfilter.c

lsm: infrastructure management of the sock security

2026-08-03 11:15:36 +02:00

smack.h

lsm: infrastructure management of the sock security

2026-08-03 11:15:36 +02:00

smackfs.c

smack: /smack/doi: accept previously used values

2026-03-04 07:19:39 -05:00