LSM: Introduce enum lsm_order
authorKees Cook <keescook@chromium.org>
Thu, 20 Sep 2018 00:48:21 +0000 (17:48 -0700)
committerKees Cook <keescook@chromium.org>
Tue, 8 Jan 2019 21:18:43 +0000 (13:18 -0800)
commite2bc445b66cad25b0627391df8138a83d0e48f97
treeb078f987045e8723a6c9d80049d8c78bbdf2181d
parentd6aed64b74b73b64278c059eacd59d87167aa968
LSM: Introduce enum lsm_order

In preparation for distinguishing the "capability" LSM from other LSMs, it
must be ordered first. This introduces LSM_ORDER_MUTABLE for the general
LSMs and LSM_ORDER_FIRST for capability. In the future LSM_ORDER_LAST
for could be added for anything that must run last (e.g. Landlock may
use this).

Signed-off-by: Kees Cook <keescook@chromium.org>
include/linux/lsm_hooks.h
security/security.c