diff options
| author | Roberto Sassu <roberto.sassu@huawei.com> | 2024-02-15 11:31:00 +0100 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2024-02-15 23:43:42 -0500 |
| commit | 8f46ff5767b0b18329140d80d6bcabd818f42c4c (patch) | |
| tree | 0023bde4f2e5cacda47f6bb5edb32dd552dfeed8 /fs/namei.c | |
| parent | dae52cbf5887ac51c3574648124cfe475a9b3246 (diff) | |
| download | linux-8f46ff5767b0b18329140d80d6bcabd818f42c4c.tar.gz linux-8f46ff5767b0b18329140d80d6bcabd818f42c4c.tar.bz2 linux-8f46ff5767b0b18329140d80d6bcabd818f42c4c.zip | |
security: Introduce file_post_open hook
In preparation to move IMA and EVM to the LSM infrastructure, introduce the
file_post_open hook. Also, export security_file_post_open() for NFS.
Based on policy, IMA calculates the digest of the file content and
extends the TPM with the digest, verifies the file's integrity based on
the digest, and/or includes the file digest in the audit log.
LSMs could similarly take action depending on the file content and the
access mask requested with open().
The new hook returns a value and can cause the open to be aborted.
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>
Acked-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'fs/namei.c')
| -rw-r--r-- | fs/namei.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/fs/namei.c b/fs/namei.c index 4e0de939fea1..ef867f1d6704 100644 --- a/fs/namei.c +++ b/fs/namei.c @@ -3640,6 +3640,8 @@ static int do_open(struct nameidata *nd, if (!error && !(file->f_mode & FMODE_OPENED)) error = vfs_open(&nd->path, file); if (!error) + error = security_file_post_open(file, op->acc_mode); + if (!error) error = ima_file_check(file, op->acc_mode); if (!error && do_truncate) error = handle_truncate(idmap, file); |