Re: [PATCH v8 5/8] rust: security: add abstraction for secctx

From: Gary Guo
Date: Wed Aug 07 2024 - 10:57:37 EST


On Thu, 25 Jul 2024 14:27:38 +0000
Alice Ryhl <aliceryhl@xxxxxxxxxx> wrote:

> Add an abstraction for viewing the string representation of a security
> context.
>
> This is needed by Rust Binder because it has a feature where a process
> can view the string representation of the security context for incoming
> transactions. The process can use that to authenticate incoming
> transactions, and since the feature is provided by the kernel, the
> process can trust that the security context is legitimate.
>
> Reviewed-by: Benno Lossin <benno.lossin@xxxxxxxxx>
> Reviewed-by: Martin Rodriguez Reboredo <yakoyoku@xxxxxxxxx>
> Reviewed-by: Trevor Gross <tmgross@xxxxxxxxx>
> Signed-off-by: Alice Ryhl <aliceryhl@xxxxxxxxxx>

Reviewed-by: Gary Guo <gary@xxxxxxxxxxx>

> ---
> rust/bindings/bindings_helper.h | 1 +
> rust/helpers.c | 21 ++++++++++++
> rust/kernel/cred.rs | 8 +++++
> rust/kernel/lib.rs | 1 +
> rust/kernel/security.rs | 74 +++++++++++++++++++++++++++++++++++++++++
> 5 files changed, 105 insertions(+)