On 7/28/20 12:05 PM, James Morris wrote: > On Tue, 28 Jul 2020, Casey Schaufler wrote: > >> You could make a separate LSM to do these checks instead of limiting >> it to SELinux. Your use case, your call, of course. > It's not limited to SELinux. This is hooked via the LSM API and > implementable by any LSM (similar to execmem, execstack etc.) Yes. I have an implementation that I am testing right now that defines the hook for exectramp and implements it for SELinux. That is why I mentioned SELinux. Madhavan
- [PATCH v1 2/4] [RFC] x86/trampfd: Provide support... madvenka
- RE: [PATCH v1 0/4] [RFC] Implement Trampoline Fil... David Laight
- Re: [PATCH v1 0/4] [RFC] Implement Trampolin... Madhavan T. Venkataraman
- Re: [PATCH v1 0/4] [RFC] Implement Tramp... Andy Lutomirski
- Re: [PATCH v1 0/4] [RFC] Implement T... Madhavan T. Venkataraman
- RE: [PATCH v1 0/4] [RFC] Impleme... David Laight
- Re: [PATCH v1 0/4] [RFC] Implement T... Andy Lutomirski
- Re: [PATCH v1 0/4] [RFC] Implement Trampoline Fil... Casey Schaufler
- Re: [PATCH v1 0/4] [RFC] Implement Trampolin... Madhavan T. Venkataraman
- Re: [PATCH v1 0/4] [RFC] Implement Trampolin... James Morris
- Re: [PATCH v1 0/4] [RFC] Implement Tramp... Madhavan T. Venkataraman
- Re: [PATCH v1 0/4] [RFC] Implement Trampoline Fil... Andy Lutomirski
- Re: [PATCH v1 0/4] [RFC] Implement Trampolin... Madhavan T. Venkataraman
- Re: [PATCH v1 0/4] [RFC] Implement Trampolin... Florian Weimer