From 6b2f0b25edf46596ca5a630bb572a0f14339f07c Mon Sep 17 00:00:00 2001 From: John Johansen Date: Sat, 29 Sep 2018 06:04:33 +0000 Subject: [PATCH] Update apparmor_kernel_development_guide --- apparmor_kernel_development_guide.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/apparmor_kernel_development_guide.md b/apparmor_kernel_development_guide.md index c9160e4..80ff8e9 100644 --- a/apparmor_kernel_development_guide.md +++ b/apparmor_kernel_development_guide.md @@ -60,6 +60,11 @@ Mediation - task.c, include/task.h: task related mediation and storing off of state for nonewprivs, change_hat, change_onexec - resource.c, include/resource.h: mediation of rlimits, and also setting rlimits to profile defined values +# LSM +Infrastructure that provides a set of hooks and blobs off of kernel object. Hooks are spread through out the kernel, called using +- security_XXX. +???? + # task labeling The task's label is stored off of the task's cred security blob, not the task security blob. In older versions of apparmor the data stored in the task security blob was also stored in the cred security blob in addition to the label, and there was no task security blob.