Mickaël Salaün 100f59d964 LSM: Remove double path_rename hook calls for RENAME_EXCHANGE ...

In order to be able to identify a file exchange with renameat2(2) and
RENAME_EXCHANGE, which will be useful for Landlock [1], propagate the
rename flags to LSMs.  This may also improve performance because of the
switch from two set of LSM hook calls to only one, and because LSMs
using this hook may optimize the double check (e.g. only one lock,
reduce the number of path walks).

AppArmor, Landlock and Tomoyo are updated to leverage this change.  This
should not change the current behavior (same check order), except
(different level of) speed boosts.

[1] https://lore.kernel.org/r/20220221212522.320243-1-mic@digikod.net

Cc: James Morris <jmorris@namei.org>
Cc: Kentaro Takeda <takedakn@nttdata.co.jp>
Cc: Serge E. Hallyn <serge@hallyn.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Acked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Reviewed-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Link: https://lore.kernel.org/r/20220506161102.525323-7-mic@digikod.net

2022-05-23 13:27:58 +02:00

..

include

Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2021-11-11 14:47:32 -08:00

.gitignore

.gitignore: add SPDX License Identifier

2020-03-25 11:50:48 +01:00

apparmorfs.c

Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2021-11-11 14:47:32 -08:00

audit.c

audit: purge audit_log_string from the intra-kernel audit API

2020-07-21 11:12:31 -04:00

capability.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

crypto.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

domain.c

tracehook: Remove tracehook.h

2022-03-10 16:51:51 -06:00

file.c

apparmor: handle idmapped mounts

2021-01-24 14:27:20 +01:00

ipc.c

audit: purge audit_log_string from the intra-kernel audit API

2020-07-21 11:12:31 -04:00

Kconfig

Merge tag 'for-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2020-08-11 14:30:36 -07:00

label.c

Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2021-11-11 14:47:32 -08:00

lib.c

treewide: Use fallthrough pseudo-keyword

2020-08-23 17:36:59 -05:00

lsm.c

LSM: Remove double path_rename hook calls for RENAME_EXCHANGE

2022-05-23 13:27:58 +02:00

Makefile

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

match.c

apparmor: ensure that dfa state tables have entries

2020-04-08 04:42:48 -07:00

mount.c

apparmor:match_mn() - constify devpath argument

2021-03-24 14:11:29 -04:00

net.c

security: add const qualifier to struct sock in various places

2020-12-03 12:56:03 -08:00

nulldfa.in

apparmor: cleanup add proper line wrapping to nulldfa.in

2018-02-09 11:30:01 -08:00

path.c

security: apparmor: delete repeated words in comments

2021-02-07 04:15:46 -08:00

policy_ns.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00

policy_unpack_test.c

apparmor: add AppArmor KUnit tests for policy unpack

2020-01-09 16:27:43 -07:00

policy_unpack.c

Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2021-11-11 14:47:32 -08:00

policy.c

Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2021-11-11 14:47:32 -08:00

procattr.c

apparmor: remove duplicated 'Returns:' comments

2021-11-03 15:57:51 -07:00

resource.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

secid.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

stacksplitdfa.in

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

task.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00