LSM: Create lsm_list_modules system call
authorCasey Schaufler <casey@schaufler-ca.com>
Tue, 12 Sep 2023 20:56:50 +0000 (13:56 -0700)
committerPaul Moore <paul@paul-moore.com>
Mon, 13 Nov 2023 03:54:42 +0000 (22:54 -0500)
commitad4aff9ec25f400608283c10d634cc4eeda83a02
tree433e899f0d7cf1d526af229fa3e68cf9e3ff3528
parenta04a1198088a1378d0389c250cc684f649bcc91e
LSM: Create lsm_list_modules system call

Create a system call to report the list of Linux Security Modules
that are active on the system. The list is provided as an array
of LSM ID numbers.

The calling application can use this list determine what LSM
specific actions it might take. That might include choosing an
output format, determining required privilege or bypassing
security module specific behavior.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Serge Hallyn <serge@hallyn.com>
Reviewed-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: Mickaël Salaün <mic@digikod.net>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Documentation/userspace-api/lsm.rst
include/linux/syscalls.h
kernel/sys_ni.c
security/lsm_syscalls.c