]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
io_uring,lsm,selinux: add LSM hooks for io_uring_setup()
authorHamza Mahfooz <hamzamahfooz@linux.microsoft.com>
Mon, 27 Jan 2025 15:57:18 +0000 (10:57 -0500)
committerPaul Moore <paul@paul-moore.com>
Fri, 7 Feb 2025 22:17:49 +0000 (17:17 -0500)
commitc6ad9fdbd44b78f51fa50138247694774ab99e97
treee28a1056a83be8177af5db7c75959d431267bd1c
parentb8a468e0b0604a10e72ab7f55af0f931aac1d477
io_uring,lsm,selinux: add LSM hooks for io_uring_setup()

It is desirable to allow LSM to configure accessibility to io_uring
because it is a coarse yet very simple way to restrict access to it. So,
add an LSM for io_uring_allowed() to guard access to io_uring.

Cc: Paul Moore <paul@paul-moore.com>
Signed-off-by: Hamza Mahfooz <hamzamahfooz@linux.microsoft.com>
Acked-by: Jens Axboe <axboe@kernel.dk>
[PM: merge fuzz due to changes in preceding patches, subj tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/linux/lsm_hook_defs.h
include/linux/security.h
io_uring/io_uring.c
security/security.c
security/selinux/hooks.c
security/selinux/include/classmap.h