Re: nominal lsm module example

From: Stephen Smalley (sds@private)
Date: Wed Jun 01 2005 - 04:26:22 PDT


On Tue, 2005-05-31 at 16:21 -0700, rjf wrote:
> On 5/29/05, Greg KH <greg@private> wrote:
> > security/root_plug.c?
> 
> Thanks to all for your replies. I was able to take the root_plug
> example and modify it to my needs.
> 
> My current question would be is there a hook that gets called when a
> dynamic library is about to be loaded? I looked through the callbacks
> and didn't see anything obvious.

file_mmap, in particular you care about the PROT_EXEC case.  See
selinux_file_mmap and selinux_file_mprotect for examples.

-- 
Stephen Smalley
National Security Agency



This archive was generated by hypermail 2.1.3 : Wed Jun 01 2005 - 04:37:05 PDT