LSM: Helpers for attribute names and filling lsm_ctx

Add lsm_name_to_attr(), which translates a text string to a
LSM_ATTR value if one is available.

Add lsm_fill_user_ctx(), which fills a struct lsm_ctx, including
the trailing attribute value.

Both are used in module specific components of LSM system calls.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: John Johansen <john.johansen@canonical.com>
Reviewed-by: Serge Hallyn <serge@hallyn.com>
Reviewed-by: Mickaël Salaün <mic@digikod.net>
Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
Casey Schaufler
2023-09-12 13:56:52 -07:00
committed by Paul Moore
parent 5f42375904
commit e1ca7129db
3 changed files with 79 additions and 0 deletions

View File

@@ -17,6 +17,30 @@
#include <linux/lsm_hooks.h>
#include <uapi/linux/lsm.h>
/**
* lsm_name_to_attr - map an LSM attribute name to its ID
* @name: name of the attribute
*
* Returns the LSM attribute value associated with @name, or 0 if
* there is no mapping.
*/
u64 lsm_name_to_attr(const char *name)
{
if (!strcmp(name, "current"))
return LSM_ATTR_CURRENT;
if (!strcmp(name, "exec"))
return LSM_ATTR_EXEC;
if (!strcmp(name, "fscreate"))
return LSM_ATTR_FSCREATE;
if (!strcmp(name, "keycreate"))
return LSM_ATTR_KEYCREATE;
if (!strcmp(name, "prev"))
return LSM_ATTR_PREV;
if (!strcmp(name, "sockcreate"))
return LSM_ATTR_SOCKCREATE;
return LSM_ATTR_UNDEF;
}
/**
* sys_lsm_set_self_attr - Set current task's security module attribute
* @attr: which attribute to set