Page MenuHomeFreeBSD
Differential D20295

Support for setting labels via veriexec
ClosedPublic
Actions

Authored by stevek on May 17 2019, 6:39 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Dec 20, 10:20 PM
Unknown Object (File)
Fri, Dec 20, 10:15 PM
Unknown Object (File)
Fri, Dec 20, 9:57 PM
Unknown Object (File)
Fri, Dec 20, 7:04 PM
Unknown Object (File)
Thu, Dec 12, 11:03 PM
Unknown Object (File)
Sun, Dec 8, 12:46 AM
Unknown Object (File)
Sat, Nov 30, 1:13 PM
Unknown Object (File)
Sep 30 2024, 12:36 AM
View All 58 Files
Subscribers
imp
jtl

Details

Reviewers
sjg
Commits
rS347942: Add a new ioctl for the larger params struct that includes the label.
Summary

Add a new ioctl for the larger params struct that includes the label.

We need to make the find_veriexec_file() function available publicly, so
rename it to mac_veriexec_metadata_find_file_info() and make it non-static.

Bump the version of the veriexec device interface so user space will know
the labelized version of fingerprint loading is available.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 24286
Build 23112: arc lint + arc unit

Event Timeline

stevek created this revision.May 17 2019, 6:39 PM
Herald added a subscriber: imp. · View Herald TranscriptMay 17 2019, 6:39 PM
Harbormaster completed remote builds in B24286: Diff 57494.May 17 2019, 6:39 PM
stevek updated this revision to Diff 57495.EditedMay 17 2019, 6:56 PM

Return the size of the allocated space for the label, even if we copied in a smaller label.

Harbormaster completed remote builds in B24287: Diff 57495.May 17 2019, 6:56 PM
stevek edited the summary of this revision. (Show Details)May 17 2019, 6:57 PM
sjg accepted this revision.May 17 2019, 7:16 PM

Thanks!

This revision is now accepted and ready to land.May 17 2019, 7:16 PM
Closed by commit rS347942: Add a new ioctl for the larger params struct that includes the label. (authored by stevek). · Explain WhyMay 17 2019, 7:27 PM
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathSize
sys/
dev/
veriexec/
6 lines
21 lines
security/
mac_veriexec/
10 lines
7 lines
152 lines

Diff 57494

View Options

sys/dev/veriexec/veriexec_ioctl.h

Loading...
View Options

sys/dev/veriexec/verified_exec.c

Loading...
View Options

sys/security/mac_veriexec/mac_veriexec.h

Loading...
View Options

sys/security/mac_veriexec/mac_veriexec_internal.h

Loading...
View Options

sys/security/mac_veriexec/veriexec_metadata.c

Loading...