On Wed, Aug 26, 2020 at 11:11 AM Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote: > > Change the security_task_getsecid() interface to fill in > a lsmblob structure instead of a u32 secid in support of > LSM stacking. Audit interfaces will need to collect all > possible secids for possible reporting. > > Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx> > Reviewed-by: John Johansen <john.johansen@xxxxxxxxxxxxx> > Acked-by: Stephen Smalley <sds@xxxxxxxxxxxxx> > Signed-off-by: Casey Schaufler <casey@xxxxxxxxxxxxxxxx> > cc: linux-integrity@xxxxxxxxxxxxxxx > --- > drivers/android/binder.c | 12 +------ > include/linux/security.h | 7 ++-- > kernel/audit.c | 16 ++++----- > kernel/auditfilter.c | 4 +-- > kernel/auditsc.c | 25 +++++++------- > net/netlabel/netlabel_unlabeled.c | 5 ++- > net/netlabel/netlabel_user.h | 6 +++- > security/integrity/ima/ima_appraise.c | 10 +++--- > security/integrity/ima/ima_main.c | 49 +++++++++++++++------------ > security/security.c | 12 +++++-- > 10 files changed, 76 insertions(+), 70 deletions(-) Acked-by: Paul Moore <paul@xxxxxxxxxxxxxx> -- paul moore www.paul-moore.com