linux/security/selinux/include
Eric Paris c9180a57a9 Security: add get, set, and cloning of superblock security information
Adds security_get_sb_mnt_opts, security_set_sb_mnt_opts, and
security_clont_sb_mnt_opts to the LSM and to SELinux.  This will allow
filesystems to directly own and control all of their mount options if they
so choose.  This interface deals only with option identifiers and strings so
it should generic enough for any LSM which may come in the future.

Filesystems which pass text mount data around in the kernel (almost all of
them) need not currently make use of this interface when dealing with
SELinux since it will still parse those strings as it always has.  I assume
future LSM's would do the same.  NFS is the primary FS which does not use
text mount data and thus must make use of this interface.

An LSM would need to implement these functions only if they had mount time
options, such as selinux has context= or fscontext=.  If the LSM has no
mount time options they could simply not implement and let the dummy ops
take care of things.

An LSM other than SELinux would need to define new option numbers in
security.h and any FS which decides to own there own security options would
need to be patched to use this new interface for every possible LSM.  This
is because it was stated to me very clearly that LSM's should not attempt to
understand FS mount data and the burdon to understand security should be in
the FS which owns the options.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Stephen D. Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
2008-01-25 11:29:46 +11:00
..
av_inherit.h [SELinux]: Add support for DCCP 2006-12-02 21:22:24 -08:00
av_perm_to_string.h security: Protection for exploiting null dereference using mmap 2007-07-11 22:52:29 -04:00
av_permissions.h security: Protection for exploiting null dereference using mmap 2007-07-11 22:52:29 -04:00
avc.h SELinux: Improve read/write performance 2007-10-17 08:59:31 +10:00
avc_ss.h SELinux: export object class and permission definitions 2006-11-28 12:04:36 -05:00
class_to_string.h security: Protection for exploiting null dereference using mmap 2007-07-11 22:52:29 -04:00
common_perm_to_string.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
conditional.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
flask.h security: Protection for exploiting null dereference using mmap 2007-07-11 22:52:29 -04:00
initial_sid_to_string.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
netif.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
netlabel.h SELinux: rename selinux_netlabel.h to netlabel.h 2007-04-26 01:35:50 -04:00
objsec.h Security: add get, set, and cloning of superblock security information 2008-01-25 11:29:46 +11:00
security.h SELinux: policy selectable handling of unknown classes and perms 2007-10-17 08:59:33 +10:00
xfrm.h [SELINUX]: Fix 2.6.20-rc6 build when no xfrm 2007-01-26 19:03:48 -08:00