| Message ID | 20220418145945.38797-25-casey@schaufler-ca.com (mailing list archive) |
|---|---|
| State | Changes Requested |
| Delegated to: | Paul Moore |
| Headers | show |
| Series | [v35,01/29] integrity: disassociate ima_filter_rule from security_audit_rule | expand |
On Mon, Apr 18, 2022 at 11:12 AM Casey Schaufler <casey@schaufler-ca.com> wrote: > > Add a new boolean function lsm_multiple_contexts() to > identify when multiple security modules provide security > context strings. > > Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> > --- > include/linux/security.h | 9 +++++++++ > 1 file changed, 9 insertions(+) Acked-by: Paul Moore <paul@paul-moore.com>
On 4/18/22 07:59, Casey Schaufler wrote: > Add a new boolean function lsm_multiple_contexts() to > identify when multiple security modules provide security > context strings. > > Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Reviewed-by: John Johansen <john.johansen@canonical.com> > --- > include/linux/security.h | 9 +++++++++ > 1 file changed, 9 insertions(+) > > diff --git a/include/linux/security.h b/include/linux/security.h > index 2150016492be..3fab84220f88 100644 > --- a/include/linux/security.h > +++ b/include/linux/security.h > @@ -232,6 +232,15 @@ static inline bool lsmblob_equal(const struct lsmblob *bloba, > extern int lsm_name_to_slot(char *name); > extern const char *lsm_slot_to_name(int slot); > > +static inline bool lsm_multiple_contexts(void) > +{ > +#ifdef CONFIG_SECURITY > + return lsm_slot_to_name(1) != NULL; > +#else > + return false; > +#endif > +} > + > /** > * lsmblob_value - find the first non-zero value in an lsmblob structure. > * @blob: Pointer to the data
diff --git a/include/linux/security.h b/include/linux/security.h index 2150016492be..3fab84220f88 100644 --- a/include/linux/security.h +++ b/include/linux/security.h @@ -232,6 +232,15 @@ static inline bool lsmblob_equal(const struct lsmblob *bloba, extern int lsm_name_to_slot(char *name); extern const char *lsm_slot_to_name(int slot); +static inline bool lsm_multiple_contexts(void) +{ +#ifdef CONFIG_SECURITY + return lsm_slot_to_name(1) != NULL; +#else + return false; +#endif +} + /** * lsmblob_value - find the first non-zero value in an lsmblob structure. * @blob: Pointer to the data
Add a new boolean function lsm_multiple_contexts() to identify when multiple security modules provide security context strings. Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> --- include/linux/security.h | 9 +++++++++ 1 file changed, 9 insertions(+)