1 .. SPDX-License-Identifier: GPL-2.0
2 .. Copyright (C) 2022 Casey Schaufler <casey@sc
3 .. Copyright (C) 2022 Intel Corporation
4
5 =====================================
6 Linux Security Modules
7 =====================================
8
9 :Author: Casey Schaufler
10 :Date: July 2023
11
12 Linux security modules (LSM) provide a mechani
13 additional access controls to the Linux securi
14
15 The various security modules may support any o
16
17 ``LSM_ATTR_CURRENT`` is the current, active se
18 process.
19 The proc filesystem provides this value in ``/
20 This is supported by the SELinux, Smack and Ap
21 Smack also provides this value in ``/proc/self
22 AppArmor also provides this value in ``/proc/s
23
24 ``LSM_ATTR_EXEC`` is the security context of t
25 current image was executed.
26 The proc filesystem provides this value in ``/
27 This is supported by the SELinux and AppArmor
28 AppArmor also provides this value in ``/proc/s
29
30 ``LSM_ATTR_FSCREATE`` is the security context
31 creating file system objects.
32 The proc filesystem provides this value in ``/
33 This is supported by the SELinux security modu
34
35 ``LSM_ATTR_KEYCREATE`` is the security context
36 creating key objects.
37 The proc filesystem provides this value in ``/
38 This is supported by the SELinux security modu
39
40 ``LSM_ATTR_PREV`` is the security context of t
41 current security context was set.
42 The proc filesystem provides this value in ``/
43 This is supported by the SELinux and AppArmor
44 AppArmor also provides this value in ``/proc/s
45
46 ``LSM_ATTR_SOCKCREATE`` is the security contex
47 creating socket objects.
48 The proc filesystem provides this value in ``/
49 This is supported by the SELinux security modu
50
51 Kernel interface
52 ================
53
54 Set a security attribute of the current proces
55 ----------------------------------------------
56
57 .. kernel-doc:: security/lsm_syscalls.c
58 :identifiers: sys_lsm_set_self_attr
59
60 Get the specified security attributes of the c
61 ----------------------------------------------
62
63 .. kernel-doc:: security/lsm_syscalls.c
64 :identifiers: sys_lsm_get_self_attr
65
66 .. kernel-doc:: security/lsm_syscalls.c
67 :identifiers: sys_lsm_list_modules
68
69 Additional documentation
70 ========================
71
72 * Documentation/security/lsm.rst
73 * Documentation/security/lsm-development.rst
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.