ACK.
This has been in the android tree since Nov 2012.
Forward port of commit: 6639e3d91a05bafa2a85c24c211c43fcaa1b17c5 in https://android.googlesource.com/kernel/common.git
Thanks,
Jeff
On Thu, Jan 22, 2015 at 12:51 AM, Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx> wrote:
On Wed, Jan 21, 2015 at 10:54:10AM -0500, Stephen Smalley wrote:
> Add security hooks to the binder and implement the hooks for SELinux.
> The security hooks enable security modules such as SELinux to implement
> controls over binder IPC. The security hooks include support for
> controlling what process can become the binder context manager
> (binder_set_context_mgr), controlling the ability of a process
> to invoke a binder transaction/IPC to another process (binder_transaction),
> controlling the ability of a process to transfer a binder reference to
> another process (binder_transfer_binder), and controlling the ability
> of a process to transfer an open file to another process (binder_transfer_file).
>
> These hooks have been included in the Android kernel trees since Android 4.3.
Very interesting, I missed the fact that these were added in that tree,
thanks for digging it out and submitting it.
I'd like some acks from some Android developers before I take these.
Or, if it's easier for them to go through the security tree, that's fine
with me as well.
thanks,
greg k-h
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
_______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.