question about bprm_ops->alloc_security(&bprm)

Previous message: Chris Wright: "Re: [PATCH] add lock hook to prevent race"
Next in thread: Huagang Xie: "question about bprm_ops-&gt;alloc_security(&amp;bprm)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

xieat_private

Hi,

I am trying to port LIDS to LSM right now, I meet a problem when I deal
with hook in the do_execve(), there is alloc_security() that I can
use. But since I want to check the envp, the bprm here can not give me
this envp,

int do_execve(char * filename, char ** argv, char ** envp, struct pt_regs
* regs)
{
       ..... 
       retval = security_ops->bprm_ops->alloc_security(&bprm);
        if (retval)
 ....
}

I wonder if you can put this hook a little later that the copy_string can
copy envp to bprm or simply add a pointer parameter to alloc_security()?

Thanks,
Huagang

-- 
LIDS secure linux kernel
http://www.lids.org/
1024D/B6EFB028 		4731 2BF7 7735 4DBD 3771  4E24 B53B B60A B6EF B028

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module