Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
docs: ABI: ABI documentation for procfs attribute files used by multiple LSMs
Provide basic ABI descriptions for the process attribute entries
that are shared between multiple Linux security modules.
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Link: https://lore.kernel.org/r/30c36660-3694-0c0d-d472-8f3b3ca4098e@schaufler-ca.com
Signed-off-by: Jonathan Corbet <corbet@lwn.net>
authored by
Casey Schaufler
and committed by
Jonathan Corbet
bfe7bf31
7d717887
+59
+20
Documentation/ABI/testing/procfs-attr-current
+20
Documentation/ABI/testing/procfs-attr-current
···
1
+
What: /proc/*/attr/current
2
+
Contact: linux-security-module@vger.kernel.org,
3
+
selinux@vger.kernel.org,
4
+
apparmor@lists.ubuntu.com
5
+
Description: The current security information used by a Linux
6
+
security module (LSM) that is active on the system.
7
+
The details of permissions required to read from
8
+
this interface and hence obtain the security state
9
+
of the task identified is LSM dependent.
10
+
A process cannot write to this interface unless it
11
+
refers to itself.
12
+
The other details of permissions required to write to
13
+
this interface and hence change the security state of
14
+
the task identified are LSM dependent.
15
+
The format of the data used by this interface is LSM
16
+
dependent.
17
+
SELinux, Smack and AppArmor provide this interface.
18
+
Users: SELinux user-space
19
+
Smack user-space
20
+
AppArmor user-space
+20
Documentation/ABI/testing/procfs-attr-exec
+20
Documentation/ABI/testing/procfs-attr-exec
···
1
+
What: /proc/*/attr/exec
2
+
Contact: linux-security-module@vger.kernel.org,
3
+
selinux@vger.kernel.org,
4
+
apparmor@lists.ubuntu.com
5
+
Description: The security information to be used on the process
6
+
by a Linux security module (LSM) active on the system
7
+
after a subsequent exec() call.
8
+
The details of permissions required to read from
9
+
this interface and hence obtain the security state
10
+
of the task identified is LSM dependent.
11
+
A process cannot write to this interface unless it
12
+
refers to itself.
13
+
The other details of permissions required to write to
14
+
this interface and hence change the security state of
15
+
the task identified are LSM dependent.
16
+
The format of the data used by this interface is LSM
17
+
dependent.
18
+
SELinux and AppArmor provide this interface.
19
+
Users: SELinux user-space
20
+
AppArmor user-space
+19
Documentation/ABI/testing/procfs-attr-prev
+19
Documentation/ABI/testing/procfs-attr-prev
···
1
+
What: /proc/*/attr/prev
2
+
Contact: linux-security-module@vger.kernel.org,
3
+
selinux@vger.kernel.org,
4
+
apparmor@lists.ubuntu.com
5
+
Description: The security information used on the process by
6
+
a Linux security module (LSM) active on the system
7
+
prior to the most recent exec() call.
8
+
The details of permissions required to read from
9
+
this interface is LSM dependent.
10
+
A process cannot write to this interface unless it
11
+
refers to itself.
12
+
The other details of permissions required to write to
13
+
this interface are LSM dependent.
14
+
The format of the data used by this interface is LSM
15
+
dependent.
16
+
SELinux and AppArmor provide this interface.
17
+
Users: SELinux user-space
18
+
AppArmor user-space
19
+