aboutsummaryrefslogtreecommitdiff
path: root/Documentation/ABI/testing/procfs-attr-exec
diff options
context:
space:
mode:
authorCasey Schaufler2020-11-10 09:28:41 -0800
committerJonathan Corbet2020-11-13 15:02:19 -0700
commitbfe7bf311497815d7c7a21f97598b8e9cb47cb52 (patch)
tree8478d6dbbfc8f745149abfd6282ac06c5e11e5df /Documentation/ABI/testing/procfs-attr-exec
parent7d71788735608b1578e3615ff2646d3a089ff0a8 (diff)
docs: ABI: ABI documentation for procfs attribute files used by multiple LSMs
Provide basic ABI descriptions for the process attribute entries that are shared between multiple Linux security modules. Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Link: https://lore.kernel.org/r/30c36660-3694-0c0d-d472-8f3b3ca4098e@schaufler-ca.com Signed-off-by: Jonathan Corbet <corbet@lwn.net>
Diffstat (limited to 'Documentation/ABI/testing/procfs-attr-exec')
-rw-r--r--Documentation/ABI/testing/procfs-attr-exec20
1 files changed, 20 insertions, 0 deletions
diff --git a/Documentation/ABI/testing/procfs-attr-exec b/Documentation/ABI/testing/procfs-attr-exec
new file mode 100644
index 000000000000..34593866a7ab
--- /dev/null
+++ b/Documentation/ABI/testing/procfs-attr-exec
@@ -0,0 +1,20 @@
+What: /proc/*/attr/exec
+Contact: linux-security-module@vger.kernel.org,
+ selinux@vger.kernel.org,
+ apparmor@lists.ubuntu.com
+Description: The security information to be used on the process
+ by a Linux security module (LSM) active on the system
+ after a subsequent exec() call.
+ The details of permissions required to read from
+ this interface and hence obtain the security state
+ of the task identified is LSM dependent.
+ A process cannot write to this interface unless it
+ refers to itself.
+ The other details of permissions required to write to
+ this interface and hence change the security state of
+ the task identified are LSM dependent.
+ The format of the data used by this interface is LSM
+ dependent.
+ SELinux and AppArmor provide this interface.
+Users: SELinux user-space
+ AppArmor user-space