Add security hooks to binder and implement the hooks for SELinux.
authorStephen Smalley <sds@tycho.nsa.gov>
Mon, 5 Nov 2012 13:15:34 +0000 (08:15 -0500)
committerRiley Andrews <riandrews@google.com>
Tue, 13 Jan 2015 22:48:51 +0000 (22:48 +0000)
commitc76b9f83bfc0551c065229c13c785675d6da9825
treede809d4edd739d261a049967ae272c82b5fae1db
parentebce7cd30b3e00232c8be23d0f04d7c0599089b5
Add security hooks to binder and implement the hooks for SELinux.

Add security hooks to the binder and implement the hooks for SELinux.
The security hooks enable security modules such as SELinux to implement
controls over binder IPC.  The security hooks include support for
controlling what process can become the binder context manager
(binder_set_context_mgr), controlling the ability of a process
to invoke a binder transaction/IPC to another process (binder_transaction),
controlling the ability a process to transfer a binder reference to
another process (binder_transfer_binder), and controlling the ability
of a process to transfer an open file to another process (binder_transfer_file).

This support is used by SE Android, http://selinuxproject.org/page/SEAndroid.

Change-Id: I34266b66320b6a3df9ac01833d7f94daf742920e
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
drivers/android/binder.c
include/linux/security.h
security/capability.c
security/security.c
security/selinux/hooks.c
security/selinux/include/classmap.h