Files
Centos-kernel-stream-10/security/lockdown
Ondrej Mosnacek 369918c7a5 lsm: replace the name field with a pointer to the lsm_id struct
JIRA: https://issues.redhat.com/browse/RHEL-179440
CVE: CVE-2026-46054

commit 9f9dc69e06ecbc61e7a50b823b82a78daf130dc0
Author: Paul Moore <paul@paul-moore.com>
Date:   Wed Feb 12 14:45:06 2025 -0500

    lsm: replace the name field with a pointer to the lsm_id struct

    Reduce the duplication between the lsm_id struct and the DEFINE_LSM()
    definition by linking the lsm_id struct directly into the individual
    LSM's DEFINE_LSM() instance.

    Linking the lsm_id into the LSM definition also allows us to simplify
    the security_add_hooks() function by removing the code which populates
    the lsm_idlist[] array and moving it into the normal LSM startup code
    where the LSM list is parsed and the individual LSMs are enabled,
    making for a cleaner implementation with less overhead at boot.

    Reviewed-by: Kees Cook <kees@kernel.org>
    Reviewed-by: John Johansen <john.johansen@canonical.com>
    Reviewed-by: Casey Schaufler <casey@schaufler-ca.com>
    Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>
    Signed-off-by: Paul Moore <paul@paul-moore.com>

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2026-06-02 20:17:18 +02:00
..