Files
linux/security/landlock
Mickaël Salaün 79625f1b3a landlock: Prepare to use credential instead of domain for fowner
This cosmetic change is needed for audit support, specifically to be
able to filter according to cross-execution boundaries.

struct landlock_file_security's size stay the same for now but it will
increase with struct landlock_cred_security's size.

Only save Landlock domain in hook_file_set_fowner() if the current
domain has LANDLOCK_SCOPE_SIGNAL, which was previously done for each
hook_file_send_sigiotask() calls.  This should improve a bit
performance.

Replace hardcoded LANDLOCK_SCOPE_SIGNAL with the signal_scope.scope
variable.

Use scoped guards for RCU read-side critical sections.

Cc: Günther Noack <gnoack@google.com>
Link: https://lore.kernel.org/r/20250320190717.2287696-8-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
2025-03-26 13:59:37 +01:00
..
2025-03-26 13:59:34 +01:00
2024-02-27 11:21:45 +01:00
2025-03-26 13:59:34 +01:00
2025-03-26 13:59:34 +01:00
2024-02-27 11:21:45 +01:00
2024-09-16 23:50:52 +02:00
2025-03-26 13:59:34 +01:00
2022-05-09 12:31:10 +02:00
2022-05-09 12:31:10 +02:00
2025-03-26 13:59:34 +01:00
2025-03-21 12:12:19 +01:00
2025-03-21 12:12:19 +01:00