| commit | 80640c536c19360dd9d99ab56bad0d2987afdc3e | [log] [tgz] |
|---|---|---|
| author | Ryan Savitski <rsavitski@google.com> | Wed Jan 08 17:30:26 2020 +0000 |
| committer | Ryan Savitski <rsavitski@google.com> | Mon Jan 13 14:56:54 2020 +0000 |
| tree | 2b2b31b8d27f3186f58b16b6f0ecaf50484d9a02 | |
| parent | 65d6fd48c85cbe167ed128dc906c9b92c233c7b4 [diff] |
perf_event: define security class and access vectors This patch allows us to write SELinux policies for the perf_event_open() syscall LSM hooks added to the kernel in the following commit: https://github.com/torvalds/linux/commit/da97e18458fb42d7c00fac5fd1c56a3896ec666e Bug: 137092007 Change-Id: I0005759eb7a487faebe94a4653e3865343eb441e
diff --git a/private/access_vectors b/private/access_vectors index 66c1b79..8c6aa68 100644 --- a/private/access_vectors +++ b/private/access_vectors
@@ -781,3 +781,13 @@ class xdp_socket inherits socket + +class perf_event +{ + open + cpu + kernel + tracepoint + read + write +}
diff --git a/private/security_classes b/private/security_classes index 25b4cba..c0631e9 100644 --- a/private/security_classes +++ b/private/security_classes
@@ -139,6 +139,8 @@ class xdp_socket +class perf_event + # Property service class property_service # userspace