Matthew Garrett 9e47d31d6a security: Add a "locked down" LSM hook ...

Add a mechanism to allow LSMs to make a policy decision around whether
kernel functionality that would allow tampering with or examining the
runtime state of the kernel should be permitted.

Signed-off-by: Matthew Garrett <mjg59@google.com>
Acked-by: Kees Cook <keescook@chromium.org>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: James Morris <jmorris@namei.org>

2019-08-19 21:54:15 -07:00

92 KiB

Raw Blame History

View Raw