Chenbo Feng ec27c3568a selinux: bpf: Add selinux check for eBPF syscall operations ... Implement the actual checks introduced to eBPF related syscalls. This implementation use the security field inside bpf object to store a sid that identify the bpf object. And when processes try to access the object, selinux will check if processes have the right privileges. The creation of eBPF object are also checked at the general bpf check hook and new cmd introduced to eBPF domain can also be checked there. Signed-off-by: Chenbo Feng <fengc@google.com> Acked-by: Alexei Starovoitov <ast@kernel.org> Reviewed-by: James Morris <james.l.morris@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-10-20 13:32:59 +01:00
..
include	selinux: bpf: Add selinux check for eBPF syscall operations	2017-10-20 13:32:59 +01:00
ss	selinux: update my email address	2017-08-17 15:32:55 -04:00
.gitignore
avc.c	selinux/stable-4.14 PR 20170831	2017-09-12 13:21:00 -07:00
exports.c
hooks.c	selinux: bpf: Add selinux check for eBPF syscall operations	2017-10-20 13:32:59 +01:00
ibpkey.c	selinux: Add a cache for quicker retreival of PKey SIDs	2017-05-23 12:28:12 -04:00
Kconfig	security: introduce CONFIG_SECURITY_WRITABLE_HOOKS	2017-03-06 11:00:12 +11:00
Makefile	selinux: Add a cache for quicker retreival of PKey SIDs	2017-05-23 12:28:12 -04:00
netif.c
netlabel.c	calipso: Add a label cache.	2016-06-27 15:06:17 -04:00
netlink.c
netnode.c
netport.c
nlmsgtab.c	rtnetlink: add NEWCACHEREPORT message type	2017-06-21 11:22:52 -04:00
selinuxfs.c	Merge branch 'work.memdup_user' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-05 16:05:24 -07:00
xfrm.c