Linus,
Four patches to add SELinux and Smack controls to the io_uring
IORING_OP_URING_CMD. Three of these patches are necessary as without
them the IORING_OP_URING_CMD remains outside the purview of the LSMs
(Luis' LSM patch, Casey's Smack patch, and my SELinux patch). These
patches have been discussed at length with the io_uring folks, and
Jens has given his thumbs-up on the relevant patches (see the commit
descriptions). There is one patch that is not strictly necessary, but
it makes testing much easier and is very trivial: the /dev/null
IORING_OP_URING_CMD patch. If you have a problem accepting the
/dev/null patch in a rcX release, let me know and I'll remove it.
As of earlier today the tag merged cleanly with your tree, so there
should be no surprises. Please merge for v6.0.
-Paul
--
The following changes since commit 568035b01cfb107af8d2e4bd2fb9aea22cf5b868:
Linux 6.0-rc1 (2022-08-14 15:50:18 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm.git
tags/lsm-pr-20220829
for you to fetch changes up to dd9373402280cf4715fdc8fd5070f7d039e43511:
Smack: Provide read control for io_uring_cmd
(2022-08-26 14:56:35 -0400)
----------------------------------------------------------------
lsm/stable-6.0 PR 20220829
----------------------------------------------------------------
Casey Schaufler (1):
Smack: Provide read control for io_uring_cmd
Luis Chamberlain (1):
lsm,io_uring: add LSM hooks for the new uring_cmd file op
Paul Moore (2):
selinux: implement the security_uring_cmd() LSM hook
/dev/null: add IORING_OP_URING_CMD support
drivers/char/mem.c | 6 ++++++
include/linux/lsm_hook_defs.h | 1 +
include/linux/lsm_hooks.h | 3 +++
include/linux/security.h | 5 +++++
io_uring/uring_cmd.c | 5 +++++
security/security.c | 4 ++++
security/selinux/hooks.c | 24 ++++++++++++++++++++++
security/selinux/include/classmap.h | 2 +-
security/smack/smack_lsm.c | 32 ++++++++++++++++++++++++++++++
9 files changed, 81 insertions(+), 1 deletion(-)
--
paul-moore.com
