UbiquitousOS
/
OpenCloudOS-Kernel
mirror of https://gitee.com/OpenCloudOS/OpenCloudOS-Kernel.git
11
0
Fork 0
Code Issues Projects Releases Wiki Activity

lsm: Clarify documentation of vm_enough_memory hook 

include/linux/lsm_hooks.h reports the result of the LSM infrastructure to
the callers, not what LSMs should return to the LSM infrastructure.

Clarify that and add that if all LSMs return a positive value
__vm_enough_memory() will be called with cap_sys_admin set. If at least one
LSM returns 0 or negative, it will be called with cap_sys_admin cleared.

Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
Roberto Sassu 2022-11-28 15:42:39 +01:00 committed by Paul Moore
parent 572302af12
commit 361dd63ed5
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
include/linux/lsm_hooks.h
View File

@ -1398,7 +1398,11 @@
* Check permissions for allocating a new virtual mapping. * Check permissions for allocating a new virtual mapping.
* @mm contains the mm struct it is being added to. * @mm contains the mm struct it is being added to.
* @pages contains the number of pages. * @pages contains the number of pages.
* Return 0 if permission is granted. * Return 0 if permission is granted by the LSM infrastructure to the
* caller. If all LSMs return a positive value, __vm_enough_memory() will
* be called with cap_sys_admin set. If at least one LSM returns 0 or
* negative, __vm_enough_memory() will be called with cap_sys_admin
* cleared.
* *
* @ismaclabel: * @ismaclabel:
* Check if the extended attribute specified by @name * Check if the extended attribute specified by @name