| From: |
| Ryan Lee <ryan.lee-AT-canonical.com> |
| To: |
| linux-fsdevel-AT-vger.kernel.org, linux-kernel-AT-vger.kernel.org, apparmor-AT-lists.ubuntu.com, linux-security-module-AT-vger.kernel.org, selinux-AT-vger.kernel.org |
| Subject: |
| [RFC PATCH 0/6] fs, lsm: mediate O_PATH fd creation in file_open hook |
| Date: |
| Wed, 12 Mar 2025 14:21:40 -0700 |
| Message-ID: |
| <20250312212148.274205-1-ryan.lee@canonical.com> |
| Cc: |
| Ryan Lee <ryan.lee-AT-canonical.com>, Alexander Viro <viro-AT-zeniv.linux.org.uk>, Christian Brauner <brauner-AT-kernel.org>, Jan Kara <jack-AT-suse.cz>, John Johansen <john.johansen-AT-canonical.com>, Paul Moore <paul-AT-paul-moore.com>, James Morris <jmorris-AT-namei.org>, "Serge E. Hallyn" <serge-AT-hallyn.com>, Mickaël Salaün <mic-AT-digikod.net>, Günther Noack <gnoack-AT-google.com>, Stephen Smalley <stephen.smalley.work-AT-gmail.com>, Ondrej Mosnacek <omosnace-AT-redhat.com>, Casey Schaufler <casey-AT-schaufler-ca.com>, Kentaro Takeda <takedakn-AT-nttdata.co.jp>, Tetsuo Handa <penguin-kernel-AT-I-love.SAKURA.ne.jp> |
| Archive-link: |
| Article |
Calls to the openat(2) family of syscalls are mediated by the file_open LSM
hook, but the opening of O_PATH file descriptors completely bypasses LSM
mediation, preventing LSMs from initializing LSM file security context
blobs for such file descriptors for use in other mediation hooks.
This patchset enables mediation of O_PATH file descriptors through the
file_open hook and updates the LSMs using that hook to unconditionally
allow creation of O_PATH fds, in order to preserve the existing behavior.
However, the LSM patches are primarily meant as a starting point for
discussions on how each one wants to handle O_PATH fd creation.
Ryan Lee (6):
fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well
apparmor: explicitly skip mediation of O_PATH file descriptors
landlock: explicitly skip mediation of O_PATH file descriptors
selinux: explicitly skip mediation of O_PATH file descriptors
smack: explicitly skip mediation of O_PATH file descriptors
tomoyo: explicitly skip mediation of O_PATH file descriptors
fs/open.c | 7 ++++++-
security/apparmor/lsm.c | 10 ++++++++++
security/landlock/fs.c | 8 ++++++++
security/selinux/hooks.c | 5 +++++
security/smack/smack_lsm.c | 4 ++++
security/tomoyo/file.c | 4 ++++
6 files changed, 37 insertions(+), 1 deletion(-)
--
2.43.0
