Changes in Kconfig

c5e3cdbf - tomoyo: revert CONFIG_SECURITY_TOMOYO_LKM support

Thu, 03 Oct 2024 20:43:39 +0000

tomoyo: revert CONFIG_SECURITY_TOMOYO_LKM supportThis patch reverts two TOMOYO patches that were merged into Linus' treeduring the v6.12 merge window:8b985bbfabbe ("tomoyo: allow building as a loadable LSM module")268225a1de1a ("tomoyo: preparation step for building as a loadable LSM module")Together these two patches introduced the CONFIG_SECURITY_TOMOYO_LKMKconfig build option which enabled a TOMOYO specific dynamic LSM loadingmechanism (see the original commits for more details). Unfortunately,this approach was widely rejected by the LSM community as well as somemembers of the general kernel community. Objections included concernsover setting a bad precedent regarding individual LSMs managing theirLSM callback registrations as well as general kernel symbol exportingpractices. With little to no support for the CONFIG_SECURITY_TOMOYO_LKMapproach outside of Tetsuo, and multiple objections, we need to revertthese changes.Link: https://lore.kernel.org/all/0c4b443a-9c72-4800-97e8-a3816b6a9ae2@I-love.SAKURA.ne.jpLink: https://lore.kernel.org/all/CAHC9VhR=QjdoHG3wJgHFJkKYBg7vkQH2MpffgVzQ0tAByo_wRg@mail.gmail.comAcked-by: John Johansen Signed-off-by: Paul Moore List of files: /linux-6.15/security/tomoyo/Kconfig

8b985bbf - tomoyo: allow building as a loadable LSM module

Mon, 23 Sep 2024 10:55:50 +0000

tomoyo: allow building as a loadable LSM moduleOne of concerns for enabling TOMOYO in prebuilt kernels is that distributorwants to avoid bloating kernel packages. Although boot-time kernel commandline options allows selecting built-in LSMs to enable, file size increaseof vmlinux and memory footprint increase of vmlinux caused by builtin-but-not-enabled LSMs remains. If it becomes possible to make LSMs dynamicallyappendable after boot using loadable kernel modules, these problems willgo away.Another of concerns for enabling TOMOYO in prebuilt kernels is that who canprovide support when distributor cannot provide support. Due to "those whocompiled kernel code is expected to provide support for that kernel code"spell, TOMOYO is failing to get enabled in Fedora distribution [1]. Thepoint of loadable kernel module is to share the workload. If it becomespossible to make LSMs dynamically appendable after boot using loadablekernel modules, as with people can use device drivers not supported bydistributors but provided by third party device vendors, we can breakthis spell and can lower the barrier for using TOMOYO.This patch is intended for demonstrating that there is nothing difficultfor supporting TOMOYO-like loadable LSM modules. For now we need to livewith a mixture of built-in part and loadable part because fully loadableLSM modules are not supported since Linux 2.6.24 [2] and number of LSMswhich can reserve static call slots is determined at compile time inLinux 6.12.Major changes in this patch are described below.There are no behavior changes as long as TOMOYO is built into vmlinux.Add CONFIG_SECURITY_TOMOYO_LKM as "bool" instead of changingCONFIG_SECURITY_TOMOYO from "bool" to "tristate", for something wentwrong with how Makefile is evaluated if I choose "tristate".Add proxy.c for serving as a bridge between vmlinux and tomoyo.ko .Move callback functions from init.c to proxy.c when building as a loadableLSM module. init.c is built-in part and remains for reserving static callslots. proxy.c contains module's init function and tells init.c location ofcallback functions, making it possible to use static call for tomoyo.ko .By deferring initialization of "struct tomoyo_task" until tomoyo.ko isloaded, threads created between init.c reserved LSM hooks and proxy.cupdates LSM hooks will have NULL "struct tomoyo_task" instances. Assumingthat tomoyo.ko is loaded by the moment when the global init process starts,initialize "struct tomoyo_task" instance for current thread as a kernelthread when tomoyo_task(current) is called for the first time.There is a hack for exporting currently not-exported functions.This hack will be removed after all relevant functions are exported.Link: https://bugzilla.redhat.com/show_bug.cgi?id=542986 [1]Link: https://lkml.kernel.org/r/caafb609-8bef-4840-a080-81537356fc60@I-love.SAKURA.ne.jp [2]Signed-off-by: Tetsuo Handa List of files: /linux-6.15/security/tomoyo/Kconfig

c6144a21 - tomoyo: update project links

Mon, 03 Jun 2024 13:43:11 +0000

tomoyo: update project linksTOMOYO project has moved to SourceForge.net .Signed-off-by: Tetsuo Handa List of files: /linux-6.15/security/tomoyo/Kconfig

fa17087e - tomoyo: Update website link

Fri, 13 Jan 2023 14:11:38 +0000

tomoyo: Update website linkSourceForge.JP was renamed to OSDN in May 2015.Signed-off-by: Tetsuo Handa List of files: /linux-6.15/security/tomoyo/Kconfig

1ed8a462 - tomoyo: Remove "select SRCU"

Fri, 13 Jan 2023 14:08:04 +0000

tomoyo: Remove "select SRCU"Now that the SRCU Kconfig option is unconditionally selected, there isno longer any point in selecting it. Therefore, remove the "select SRCU"Kconfig statements.Signed-off-by: Paul E. McKenney Signed-off-by: Tetsuo Handa List of files: /linux-6.15/security/tomoyo/Kconfig

80f8be7a - tomoyo: Omit use of bin2c

Sun, 08 Jan 2023 13:47:26 +0000

tomoyo: Omit use of bin2cbin2c was, as its name implies, introduced to convert a binary file toC code.However, I did not see any good reason ever for using this tool becauseusing the .incbin directive is much faster, and often results in simplercode.Most of the uses of bin2c have been killed, for example: - 13610aa908dc ("kernel/configs: use .incbin directive to embed config_data.gz") - 4c0f032d4963 ("s390/purgatory: Omit use of bin2c")security/tomoyo/Makefile has even less reason for using bin2c becausethe policy files are text data. So, sed is enough for converting themto C string literals, and what is nicer, generates human-readablebuiltin-policy.h.This is the last user of bin2c. After this commit lands, bin2c will beremoved.Signed-off-by: Masahiro Yamada [penguin-kernel: Update sed script to also escape backslash and quote ]Signed-off-by: Tetsuo Handa List of files: /linux-6.15/security/tomoyo/Kconfig

a7f7f624 - treewide: replace '---help---' in Kconfig files with 'help'

Sat, 13 Jun 2020 16:50:22 +0000

treewide: replace '---help---' in Kconfig files with 'help'Since commit 84af7a6194e4 ("checkpatch: kconfig: prefer 'help' over'---help---'"), the number of '---help---' has been graduallydecreasing, but there are still more than 2400 instances.This commit finishes the conversion. While I touched the lines,I also fixed the indentation.There are a variety of indentation styles found. a) 4 spaces + '---help---' b) 7 spaces + '---help---' c) 8 spaces + '---help---' d) 1 space + 1 tab + '---help---' e) 1 tab + '---help---' (correct indentation) f) 1 tab + 1 space + '---help---' g) 1 tab + 2 spaces + '---help---'In order to convert all of them to 1 tab + 'help', I ran thefollowing commend: $ find . -name 'Kconfig*' | xargs sed -i 's/^[[:space:]]*---help---/\thelp/'Signed-off-by: Masahiro Yamada List of files: /linux-6.15/security/tomoyo/Kconfig

ec8f24b7 - treewide: Add SPDX license identifier - Makefile/Kconfig

Sun, 19 May 2019 12:07:45 +0000

treewide: Add SPDX license identifier - Makefile/KconfigAdd SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any formThese files fall under the project license, GPL v2 only. The resulting SPDXlicense identifier is: GPL-2.0-onlySigned-off-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/security/tomoyo/Kconfig

e80b1859 - tomoyo: Add a kernel config option for fuzzing testing.

Fri, 12 Apr 2019 11:04:54 +0000

tomoyo: Add a kernel config option for fuzzing testing.syzbot is reporting kernel panic triggered by memory allocation faultinjection before loading TOMOYO's policy [1]. To make the fuzzing testsuseful, we need to assign a profile other than "disabled" (no-op) mode.Therefore, let's allow syzbot to load TOMOYO's built-in policy for"learning" mode using a kernel config option. This option must not beenabled for kernels built for production system, for this option alsodisables domain/program checks when modifying policy configuration via/sys/kernel/security/tomoyo/ interface.[1] https://syzkaller.appspot.com/bug?extid=29569ed06425fcf67a95Reported-by: syzbot Reported-by: syzbot Reported-by: syzbot Signed-off-by: Tetsuo Handa Signed-off-by: James Morris List of files: /linux-6.15/security/tomoyo/Kconfig

7e114bbf - tomoyo: Use bin2c to generate builtin-policy.h

Fri, 09 Jan 2015 13:08:26 +0000

tomoyo: Use bin2c to generate builtin-policy.hSimplify the Makefile by using a readily available tool instead of acustom sed script. The downside is that builtin-policy.h becomesunreadable for humans, but it is only a generated file.Acked-by: Tetsuo Handa Signed-off-by: Michal Marek List of files: /linux-6.15/security/tomoyo/Kconfig

83fe27ea - rcu: Make SRCU optional by using CONFIG_SRCU

Fri, 05 Dec 2014 16:24:45 +0000

rcu: Make SRCU optional by using CONFIG_SRCUSRCU is not necessary to be compiled by default in all cases. For tinificationefforts not compiling SRCU unless necessary is desirable.The current patch tries to make compiling SRCU optional by introducing a newKconfig option CONFIG_SRCU which is selected when any of the components makinguse of SRCU are selected.If we do not select CONFIG_SRCU, srcu.o will not be compiled at all. text data bss dec hex filename 2007 0 0 2007 7d7 kernel/rcu/srcu.oSize of arch/powerpc/boot/zImage changes from text data bss dec hex filename 831552 64180 23944 919676 e087c arch/powerpc/boot/zImage : before 829504 64180 23952 917636 e0084 arch/powerpc/boot/zImage : afterso the savings are about ~2000 bytes.Signed-off-by: Pranith Kumar CC: Paul E. McKenney CC: Josh Triplett CC: Lai Jiangshan Signed-off-by: Paul E. McKenney [ paulmck: resolve conflict due to removal of arch/ia64/kvm/Kconfig. ] List of files: /linux-6.15/security/tomoyo/Kconfig

059d84db - TOMOYO: Add socket operation restriction support.

Sat, 10 Sep 2011 06:23:54 +0000

TOMOYO: Add socket operation restriction support.This patch adds support for permission checks for PF_INET/PF_INET6/PF_UNIXsocket's bind()/listen()/connect()/send() operations.Signed-off-by: Tetsuo Handa Signed-off-by: James Morris List of files: /linux-6.15/security/tomoyo/Kconfig

0e4ae0e0 - TOMOYO: Make several options configurable.

Sun, 26 Jun 2011 14:22:59 +0000

TOMOYO: Make several options configurable.To be able to start using enforcing mode from the early stage of boot sequence,this patch adds support for activating access control without calling externalpolicy loader program. This will be useful for systems where operations whichcan lead to the hijacking of the boot sequence are needed before loading thepolicy. For example, you can activate immediately after loading the fixed partof policy which will allow only operations needed for mounting a partitionwhich contains the variant part of policy and verifying (e.g. running GPGcheck) and loading the variant part of policy. Since you can start usingenforcing mode from the beginning, you can reduce the possibility of hijackingthe boot sequence.This patch makes several variables configurable on build time. This patch alsoadds TOMOYO_loader= and TOMOYO_trigger= kernel command line option to boot thesame kernel in two different init systems (BSD-style init and systemd).Signed-off-by: Tetsuo Handa Signed-off-by: James Morris List of files: /linux-6.15/security/tomoyo/Kconfig

00d7d6f8 - Kconfig and Makefile

Thu, 05 Feb 2009 08:18:17 +0000

Kconfig and MakefileTOMOYO uses LSM hooks for pathname based access control and securityfs support.Signed-off-by: Kentaro Takeda Signed-off-by: Tetsuo Handa Signed-off-by: James Morris List of files: /linux-6.15/security/tomoyo/Kconfig