Re: [PATCH v17 1/3] lsm, selinux: Add setup_report permission to binder

[Casey Schaufler]

On 4/16/2025 9:00 AM, Li Li wrote:
> Thank you Casey! I'll resend this specific patch to linux-security-module list.
>
> Should I include the other 2 binder patches as well as they are using
> this new permission?

I would appreciate it. Context can be pretty important. Sometimes 
"why" an LSM hook is being added impacts who reviews it.

>
> On Tue, Apr 15, 2025 at 9:13 AM Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote:
>> On 4/15/2025 12:10 AM, Li Li wrote:
>>> From: Thiébaud Weksteen <tweek@xxxxxxxxxx>
>>>
>>> Introduce a new permission "setup_report" to the "binder" class.
>>> This persmission controls the ability to set up the binder generic
>>> netlink driver to report certain binder transactions.
>>>
>>> Signed-off-by: Thiébaud Weksteen <tweek@xxxxxxxxxx>
>>> Signed-off-by: Li Li <dualli@xxxxxxxxxx>
>>> ---
>>>  include/linux/lsm_hook_defs.h       |  1 +
>>>  include/linux/security.h            |  6 ++++++
>>>  security/security.c                 | 13 +++++++++++++
>> This patch needs to be sent to the linux-security-module list.
>>