diff options
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2018-07-13 20:06:02 +0200 |
|---|---|---|
| committer | James Morris <james.morris@microsoft.com> | 2018-07-16 21:31:57 +0200 |
| commit | c77b8cdf745d91eca138e7bfa430dc6640b604a0 (patch) | |
| tree | f1cc1edc3cecbff32a4450d252b551f5260ee9e1 /kernel/module.c | |
| parent | ima: add build time policy (diff) | |
| download | linux-c77b8cdf745d91eca138e7bfa430dc6640b604a0.tar.xz linux-c77b8cdf745d91eca138e7bfa430dc6640b604a0.zip | |
module: replace the existing LSM hook in init_module
Both the init_module and finit_module syscalls call either directly
or indirectly the security_kernel_read_file LSM hook. This patch
replaces the direct call in init_module with a call to the new
security_kernel_load_data hook and makes the corresponding changes
in SELinux, LoadPin, and IMA.
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: Jeff Vander Stoep <jeffv@google.com>
Cc: Casey Schaufler <casey@schaufler-ca.com>
Cc: Kees Cook <keescook@chromium.org>
Acked-by: Jessica Yu <jeyu@kernel.org>
Acked-by: Paul Moore <paul@paul-moore.com>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>
Diffstat (limited to 'kernel/module.c')
| -rw-r--r-- | kernel/module.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/kernel/module.c b/kernel/module.c index f475f30eed8c..a7615d661910 100644 --- a/kernel/module.c +++ b/kernel/module.c @@ -2876,7 +2876,7 @@ static int copy_module_from_user(const void __user *umod, unsigned long len, if (info->len < sizeof(*(info->hdr))) return -ENOEXEC; - err = security_kernel_read_file(NULL, READING_MODULE); + err = security_kernel_load_data(LOADING_MODULE); if (err) return err; |