[PATCH] shm_close hook

Previous message: Chris Wright: "Re: LSM verification -- 2..4.16"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

ratliffat_private

Hi,

I've attached a patch for you all to consider. The patch adds a hook to 
shm_close() in ipc/shm.c and updates the example modules.

The SECURE_SHM part of the OpenWall module needs this in order to destroy 
the shared memory segment when the last attached process closes it. This 
particular usage of the hook changes the way that shared memory works, 
but, as Seth pointed out, having control over when shared memory segments 
become unused could be useful for containment.

BTW, many thanks to Chris for answering 101 questions on IRC.

Any objections to a new hook?

Thanks,

Emily

-- 
Emily Ratliff
IBM Linux Technology Center, Security