diff mbox series

[19/43] vfs: Put security flags into the fs_context struct

Message ID	155059385694.12449.4260302564821199185.stgit@warthog.procyon.org.uk (mailing list archive)
State	New, archived
Headers	show Return-Path: <linux-security-module-owner@kernel.org> Organization: Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903 Subject: [PATCH 19/43] vfs: Put security flags into the fs_context struct From: David Howells <dhowells@redhat.com> To: viro@zeniv.linux.org.uk Cc: linux-fsdevel@vger.kernel.org, dhowells@redhat.com, torvalds@linux-foundation.org, ebiederm@xmission.com, linux-security-module@vger.kernel.org Date: Tue, 19 Feb 2019 16:30:56 +0000 Message-ID: <155059385694.12449.4260302564821199185.stgit@warthog.procyon.org.uk> In-Reply-To: <155059366914.12449.4669870128936536848.stgit@warthog.procyon.org.uk> References: <155059366914.12449.4669870128936536848.stgit@warthog.procyon.org.uk> User-Agent: StGit/unknown-version MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Sender: owner-linux-security-module@vger.kernel.org Precedence: bulk
Series	VFS: Introduce filesystem context \| expand [00/43] VFS: Introduce filesystem context [01/43] fix cgroup_do_mount() handling of failure exits [02/43] cgroup: saner refcounting for cgroup_root [03/43] kill kernfs_pin_sb() [04/43] separate copying and locking mount tree on cross-userns copies [05/43] saner handling of temporary namespaces [06/43] vfs: Introduce fs_context, switch vfs_kern_mount() to it. [07/43] new helpers: vfs_create_mount(), fc_mount() [08/43] teach vfs_get_tree() to handle subtype, switch do_new_mount() to it [09/43] new helper: do_new_mount_fc() [10/43] vfs_get_tree(): evict the call of security_sb_kern_mount() [11/43] convert do_remount_sb() to fs_context [12/43] fs_context flavour for submounts [13/43] introduce fs_context methods [14/43] vfs: Introduce logging functions [15/43] vfs: Add configuration parser helpers [16/43] vfs: Add LSM hooks for the new mount API [17/43] selinux: Implement the new mount API LSM hooks [18/43] smack: Implement filesystem context security hooks [19/43] vfs: Put security flags into the fs_context struct [20/43] vfs: Implement a filesystem superblock creation/configuration context [21/43] convenience helpers: vfs_get_super() and sget_fc() [22/43] introduce cloning of fs_context [23/43] procfs: Move proc_fill_super() to fs/proc/root.c [24/43] proc: Add fs_context support to procfs [25/43] ipc: Convert mqueue fs to fs_context [26/43] cgroup: start switching to fs_context [27/43] cgroup: fold cgroup1_mount() into cgroup1_get_tree() [28/43] cgroup: take options parsing into ->parse_monolithic() [29/43] cgroup1: switch to option-by-option parsing [30/43] cgroup2: switch to option-by-option parsing [31/43] cgroup: stash cgroup_root reference into cgroup_fs_context [32/43] cgroup_do_mount(): massage calling conventions [33/43] cgroup1_get_tree(): separate "get cgroup_root to use" into a separate helper [34/43] cgroup: store a reference to cgroup_ns into cgroup_fs_context [35/43] kernfs, sysfs, cgroup, intel_rdt: Support fs_context [36/43] cpuset: Use fs_context [37/43] hugetlbfs: Convert to fs_context [38/43] vfs: Remove kern_mount_data() [39/43] vfs: Provide documentation for new mount API [40/43] vfs: Implement logging through fs_context [41/43] vfs: Add some logging to the core users of the fs_context log [42/43] afs: Add fs_context support [43/43] afs: Use fs_context to pass parameters over automount

Commit Message

David Howells Feb. 19, 2019, 4:30 p.m. UTC

Put security flags, such as SECURITY_LSM_NATIVE_LABELS, into the filesystem
context so that the filesystem can communicate them to the LSM more easily.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
---

 include/linux/fs_context.h |    1 +
 include/linux/security.h   |    2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff mbox series

Patch

diff --git a/include/linux/fs_context.h b/include/linux/fs_context.h
index 899027c94788..d5ff3b0bc28d 100644
--- a/include/linux/fs_context.h
+++ b/include/linux/fs_context.h
@@ -85,6 +85,7 @@  struct fs_context {
 	void			*security;	/* Linux S&M options */
 	unsigned int		sb_flags;	/* Proposed superblock flags (SB_*) */
 	unsigned int		sb_flags_mask;	/* Superblock flags that were changed */
+	unsigned int		lsm_flags;	/* Information flags from the fs to the LSM */
 	enum fs_context_purpose	purpose:8;
 	bool			need_free:1;	/* Need to call ops->free() */
 };
diff --git a/include/linux/security.h b/include/linux/security.h
index 1cc4d7a3d6fa..2da9336a987e 100644
--- a/include/linux/security.h
+++ b/include/linux/security.h
@@ -61,7 +61,7 @@  enum fs_value_type;
 #define SECURITY_CAP_NOAUDIT 0
 #define SECURITY_CAP_AUDIT 1
 
-/* LSM Agnostic defines for sb_set_mnt_opts */
+/* LSM Agnostic defines for fs_context::lsm_flags */
 #define SECURITY_LSM_NATIVE_LABELS	1
 
 struct ctl_table;