Skip to content
Commit 3e412ccc authored by David Howells's avatar David Howells
Browse files

selinux: Implement the watch_key security hook



Implement the watch_key security hook to make sure that a key grants the
caller View permission in order to set a watch on a key.

For the moment, the watch_devices security hook is left unimplemented as
it's not obvious what the object should be since the queue is global and
didn't previously exist.

Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
Acked-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
Reviewed-by: default avatarJames Morris <jamorris@linux.microsoft.com>
parent 8c0637e9
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment