Re: [PATCH] Add security hooks to binder and implement the hooks for SELinux.

[Greg KH <gregkh@linuxfoundation.org>]

On Thu, Jan 22, 2015 at 01:47:29PM -0500, Stephen Smalley wrote:
> On Thu, Jan 22, 2015 at 1:09 PM, Casey Schaufler <casey@schaufler-ca.com> wrote:
> > On 1/22/2015 12:51 AM, Greg KH wrote:
> >> On Wed, Jan 21, 2015 at 10:54:10AM -0500, Stephen Smalley wrote:
> >>> Add security hooks to the binder and implement the hooks for SELinux.
> >>> The security hooks enable security modules such as SELinux to implement
> >>> controls over binder IPC.  The security hooks include support for
> >>> controlling what process can become the binder context manager
> >>> (binder_set_context_mgr), controlling the ability of a process
> >>> to invoke a binder transaction/IPC to another process (binder_transaction),
> >>> controlling the ability of a process to transfer a binder reference to
> >>> another process (binder_transfer_binder), and controlling the ability
> >>> of a process to transfer an open file to another process (binder_transfer_file).
> >>>
> >>> These hooks have been included in the Android kernel trees since Android 4.3.
> >> Very interesting, I missed the fact that these were added in that tree,
> >> thanks for digging it out and submitting it.
> >>
> >> I'd like some acks from some Android developers before I take these.
> >> Or, if it's easier for them to go through the security tree, that's fine
> >> with me as well.
> >
> > My only concern is that we're about to see a set of hooks proposed
> > for kdbus as well, and it would be a shame if we had two sets of hooks
> > that do roughly the same thing (ok, *very roughly*) introduced back to back.
> 
> Not sure how much commonality there truly is among them (based on the
> last set of proposed kdbus lsm hooks that I saw, admittedly a while
> ago) and modules may want to distinguish between the two
> forms of IPC regardless.  The binder hooks have been in place in the
> Android kernel trees for quite some time, so this patch is just making
> the mainline binder driver consistent with what is already in Android.
> If it turns out that there is significant duplication when the kdbus
> lsm hooks land, I'd be happy to help coalesce them.

Yeah, I would wait and see what happens with how the kdbus hooks look
before worrying about this all that much.  As people are using the
binder hooks today, and binder is in the kernel tree, but kdbus isn't,
let's not worry about kdbus until that is merged.

thanks,

greg k-h