26 Aug, 2020

1 commit

  • Similar to bpf_local_storage for sockets, add local storage for inodes.
    The life-cycle of storage is managed with the life-cycle of the inode.
    i.e. the storage is destroyed along with the owning inode.

    The BPF LSM allocates an __rcu pointer to the bpf_local_storage in the
    security blob which are now stackable and can co-exist with other LSMs.

    Signed-off-by: KP Singh
    Signed-off-by: Alexei Starovoitov
    Link: https://lore.kernel.org/bpf/20200825182919.1118197-6-kpsingh@chromium.org

    KP Singh
     

30 Mar, 2020

1 commit

  • * The hooks are initialized using the definitions in
    include/linux/lsm_hook_defs.h.
    * The LSM can be enabled / disabled with CONFIG_BPF_LSM.

    Signed-off-by: KP Singh
    Signed-off-by: Daniel Borkmann
    Reviewed-by: Brendan Jackman
    Reviewed-by: Florent Revest
    Acked-by: Kees Cook
    Acked-by: James Morris
    Link: https://lore.kernel.org/bpf/20200329004356.27286-6-kpsingh@chromium.org

    KP Singh