Re: nominal lsm module example

From: Stephen Smalley (sds@private)
Date: Tue May 31 2005 - 07:16:12 PDT

Previous message: Adrian Bunk: "Re: [2.6 patch] security/: possible cleanups"
In reply to: rjf: "nominal lsm module example"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

On Fri, 2005-05-27 at 13:52 -0700, rjf wrote:
> I am looking to hook execv[e] in a 2.6.11 (gentoo) kernel. After
> pouring over various net searches for the last hour or so, I am fairly
> certain that LSM is the right way to accomplish this.
> 
> Is there a simple example (that builds) LSM module I could start/learn with?

security/selinux/hooks.c, in particular look at the selinux_bprm_* hook
functions.  Described in 
http://www.nsa.gov/selinux/papers/module/x646.html

-- 
Stephen Smalley
National Security Agency

Previous message: Adrian Bunk: "Re: [2.6 patch] security/: possible cleanups"
In reply to: rjf: "nominal lsm module example"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.3 : Tue May 31 2005 - 07:26:23 PDT