mm: create security context for memfd_secret inodes
authorChristian Göttsche <cgzones@googlemail.com>
Tue, 25 Jan 2022 14:33:04 +0000 (15:33 +0100)
committerPaul Moore <paul@paul-moore.com>
Mon, 13 Jun 2022 18:15:23 +0000 (14:15 -0400)
commit2bfe15c5261212130f1a71f32a300bcf426443d4
tree7dc146d23b463c610fe0e4df97f389cd08022a64
parent9691e4f9ba6c7dc6af07b8a4feba6279d76f0003
mm: create security context for memfd_secret inodes

Create a security context for the inodes created by memfd_secret(2) via
the LSM hook inode_init_security_anon to allow a fine grained control.
As secret memory areas can affect hibernation and have a global shared
limit access control might be desirable.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
mm/secretmem.c