android_kernel_google_msm/security/selinux
Jeff Vander Stoep cff5f5bf9b selinux: Android kernel compatibility with M userspace
NOT intended for new Android devices - this commit is unnecessary
for a target device that does not have a previous M variant.

DO NOT upstream. Android only.

Motivation:

This commit mitigates a mismatch between selinux kernel and
selinux userspace. The selinux ioctl white-listing binary policy
format that was accepted into Android M differs slightly from what
was later accepted into the upstream kernel. This leaves Android
master branch kernels incompatible with Android M releases. This
patch restores backwards compatibility. This is important because:

1. kernels may be updated on a different cycle than the rest of the
   OS e.g. security patching.
2. Android M bringup may still be ongoing for some devices. The
   same kernel should work for both M and master.

Backwards compatibility is achieved by checking for an Android M
policy characteristic during initial policy read and converting to
upstream policy format. The inverse conversion is done for policy
write as required for CTS testing.

Bug: 22846070
Change-Id: I2f1ee2eee402f37cf3c9df9f9e03c1b9ddec1929
Signed-off-by: Jeff Vander Stoep <jeffv@google.com>
2016-10-29 23:12:40 +08:00
..
include selinux: extended permissions for ioctls 2016-10-29 23:12:40 +08:00
ss selinux: Android kernel compatibility with M userspace 2016-10-29 23:12:40 +08:00
.gitignore
avc.c selinux: extended permissions for ioctls 2016-10-29 23:12:40 +08:00
exports.c
hooks.c selinux: extended permissions for ioctls 2016-10-29 23:12:40 +08:00
Kconfig
Makefile
netif.c
netlabel.c
netlink.c selinux: sparse fix: fix warnings in netlink code 2012-01-05 18:52:51 -05:00
netnode.c
netport.c
nlmsgtab.c selinux: add SOCK_DIAG_BY_FAMILY to the list of netlink message types 2015-04-20 09:41:59 -07:00
selinuxfs.c selinuxfs: merge dentry allocation into sel_make_dir() 2012-03-31 16:03:15 -04:00
xfrm.c