LSM: SafeSetID: Add setgroups() security policy handling
authorMicah Morton <mortonm@chromium.org>
Wed, 8 Jun 2022 22:27:27 +0000 (22:27 +0000)
committerMicah Morton <mortonm@chromium.org>
Fri, 15 Jul 2022 18:24:42 +0000 (18:24 +0000)
commit3e3374d382ff250502fbc4407001ac793d5c4e7f
treed3b13ec3478c892518fc3a482a816c3a5e9a4c7c
parentfcfe0ac2fcfae7d5fcad3d0375cb8ff38caf8aba
LSM: SafeSetID: Add setgroups() security policy handling

The SafeSetID LSM has functionality for restricting setuid()/setgid()
syscalls based on its configured security policies. This patch adds the
analogous functionality for the setgroups() syscall. Security policy
for the setgroups() syscall follows the same policies that are
installed on the system for setgid() syscalls.

Signed-off-by: Micah Morton <mortonm@chromium.org>
security/safesetid/lsm.c