| Date | Thu, 19 Mar 2020 06:06:10 +1100 (AEDT) | From | James Morris <> | Subject | Re: [PATCH 10/17] selinux: Implement the watch_key security hook [ver #5] |
| |
On Wed, 18 Mar 2020, David Howells wrote:
> Implement the watch_key security hook to make sure that a key grants the > caller View permission in order to set a watch on a key. > > For the moment, the watch_devices security hook is left unimplemented as > it's not obvious what the object should be since the queue is global and > didn't previously exist. > > Signed-off-by: David Howells <dhowells@redhat.com> > Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Reviewed-by: James Morris <jamorris@linux.microsoft.com>
-- James Morris <jmorris@namei.org>
|