Commit 846e5662 authored by David Howells's avatar David Howells Committed by Al Viro
Browse files

vfs: Put security flags into the fs_context struct 



Put security flags, such as SECURITY_LSM_NATIVE_LABELS, into the filesystem
context so that the filesystem can communicate them to the LSM more easily.

Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
parent 2febd254

include/linux/fs_context.h

+1 −0
Original line number Diff line number Diff line
@@ -85,6 +85,7 @@ struct fs_context { 
	void			*security;	/* Linux S&M options */

	unsigned int		sb_flags;	/* Proposed superblock flags (SB_*) */

	unsigned int		sb_flags_mask;	/* Superblock flags that were changed */

	unsigned int		lsm_flags;	/* Information flags from the fs to the LSM */

	enum fs_context_purpose	purpose:8;

	bool			need_free:1;	/* Need to call ops->free() */

};

include/linux/security.h

+1 −1
Original line number Diff line number Diff line
@@ -61,7 +61,7 @@ enum fs_value_type; 
#define SECURITY_CAP_NOAUDIT 0

#define SECURITY_CAP_AUDIT 1



/* LSM Agnostic defines for sb_set_mnt_opts */

/* LSM Agnostic defines for fs_context::lsm_flags */

#define SECURITY_LSM_NATIVE_LABELS	1



struct ctl_table;