[PATCH] Adding YAMA hooks also when YAMA is not stacked.

[PATCH] Adding YAMA hooks also when YAMA is not stacked.

[Salvatore Mesoraca]

Without this patch YAMA will not work at all if it is chosen
as the primary LSM instead of being "stacked".

Signed-off-by: Salvatore Mesoraca <s.mesoraca16@gmail.com>
---
 security/yama/yama_lsm.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/security/yama/yama_lsm.c b/security/yama/yama_lsm.c
index 9ed3250..5ebb896 100644
--- a/security/yama/yama_lsm.c
+++ b/security/yama/yama_lsm.c
@@ -406,6 +406,7 @@ static __init int yama_init(void)
      */
     if (!security_module_enable("yama"))
         return 0;
+    yama_add_hooks();
 #endif
     pr_info("Yama: becoming mindful.\n");

--
2.3.6

Re: [PATCH] Adding YAMA hooks also when YAMA is not stacked.

[Kees Cook]

On Fri, Jul 31, 2015 at 12:55 AM, Salvatore Mesoraca
<s.mesoraca16@gmail.com> wrote:
> Without this patch YAMA will not work at all if it is chosen
> as the primary LSM instead of being "stacked".

Ah! Good catch, thank you! CONFIG based stacking for Yama will be
removed 4.3, but this is appropriate for fixing in 4.2. James, can you
take this and send it to Linus for 4.2-rc5?

Acked-by: Kees Cook <keescook@chromium.org>

-Kees

>
> Signed-off-by: Salvatore Mesoraca <s.mesoraca16@gmail.com>
> ---
>  security/yama/yama_lsm.c | 1 +
>  1 file changed, 1 insertion(+)
>
> diff --git a/security/yama/yama_lsm.c b/security/yama/yama_lsm.c
> index 9ed3250..5ebb896 100644
> --- a/security/yama/yama_lsm.c
> +++ b/security/yama/yama_lsm.c
> @@ -406,6 +406,7 @@ static __init int yama_init(void)
>       */
>      if (!security_module_enable("yama"))
>          return 0;
> +    yama_add_hooks();
>  #endif
>      pr_info("Yama: becoming mindful.\n");
>
> --
> 2.3.6



-- 
Kees Cook
Chrome OS Security

Re: [PATCH] Adding YAMA hooks also when YAMA is not stacked.

[Salvatore Mesoraca]

> Ah! Good catch, thank you! CONFIG based stacking for Yama will be
> removed 4.3, but this is appropriate for fixing in 4.2.

Thank you very much for your time!

Salvatore Mesoraca

Re: [PATCH] Adding YAMA hooks also when YAMA is not stacked.

[James Morris]

On Fri, 31 Jul 2015, Salvatore Mesoraca wrote:

> Without this patch YAMA will not work at all if it is chosen
> as the primary LSM instead of being "stacked".
> 
> Signed-off-by: Salvatore Mesoraca <s.mesoraca16@gmail.com>
> ---
>  security/yama/yama_lsm.c | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/security/yama/yama_lsm.c b/security/yama/yama_lsm.c
> index 9ed3250..5ebb896 100644
> --- a/security/yama/yama_lsm.c
> +++ b/security/yama/yama_lsm.c
> @@ -406,6 +406,7 @@ static __init int yama_init(void)
>       */
>      if (!security_module_enable("yama"))
>          return 0;
> +    yama_add_hooks();
>  #endif
>      pr_info("Yama: becoming mindful.\n");

It looks like your mailer is converting tabs to spaces, please fix and 
resend.


-- 
James Morris
<jmorris@namei.org>

Re: [PATCH] Adding YAMA hooks also when YAMA is not stacked.

[Salvatore Mesoraca]

> It looks like your mailer is converting tabs to spaces, please fix and
> resend.

I'm sorry for this. I'm resending a fixed V2.

Salvatore Mesoraca