Page MenuHomeFreeBSD
Differential D20295

Support for setting labels via veriexec
ClosedPublic
Actions

Authored by stevek on May 17 2019, 6:39 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Apr 2, 3:15 PM
Unknown Object (File)
Thu, Apr 2, 1:15 AM
Unknown Object (File)
Sun, Mar 29, 9:53 AM
Unknown Object (File)
Tue, Mar 17, 3:48 AM
Unknown Object (File)
Tue, Mar 17, 3:23 AM
Unknown Object (File)
Thu, Mar 12, 7:50 PM
Unknown Object (File)
Fri, Mar 6, 6:32 PM
Unknown Object (File)
Feb 8 2026, 5:35 AM
View All Files
Subscribers
imp
jtl

Details

Reviewers
sjg
Commits
rS347942: Add a new ioctl for the larger params struct that includes the label.
Summary

Add a new ioctl for the larger params struct that includes the label.

We need to make the find_veriexec_file() function available publicly, so
rename it to mac_veriexec_metadata_find_file_info() and make it non-static.

Bump the version of the veriexec device interface so user space will know
the labelized version of fingerprint loading is available.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 24286
Build 23112: arc lint + arc unit

Event Timeline

stevek created this revision.May 17 2019, 6:39 PM
Herald added a subscriber: imp. · View Herald TranscriptMay 17 2019, 6:39 PM
Harbormaster completed remote builds in B24286: Diff 57494.May 17 2019, 6:39 PM
stevek updated this revision to Diff 57495.EditedMay 17 2019, 6:56 PM

Return the size of the allocated space for the label, even if we copied in a smaller label.

Harbormaster completed remote builds in B24287: Diff 57495.May 17 2019, 6:56 PM
stevek edited the summary of this revision. (Show Details)May 17 2019, 6:57 PM
sjg accepted this revision.May 17 2019, 7:16 PM

Thanks!

This revision is now accepted and ready to land.May 17 2019, 7:16 PM
Closed by commit rS347942: Add a new ioctl for the larger params struct that includes the label. (authored by stevek). · Explain WhyMay 17 2019, 7:27 PM
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathSize
sys/
dev/
veriexec/
6 lines
21 lines
security/
mac_veriexec/
10 lines
7 lines
152 lines

Diff 57494

View Options

sys/dev/veriexec/veriexec_ioctl.h

Loading...
View Options

sys/dev/veriexec/verified_exec.c

Loading...
View Options

sys/security/mac_veriexec/mac_veriexec.h

Loading...
View Options

sys/security/mac_veriexec/mac_veriexec_internal.h

Loading...
View Options

sys/security/mac_veriexec/veriexec_metadata.c

Loading...