archives/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-03-08 03:24:45 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

lsm: output available LSMs when debugging

Browse source 
This will display all of the LSMs built into the kernel, regardless
of if they are enabled or not.

Reviewed-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: John Johansen <john.johhansen@canonical.com>
Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
Paul Moore 2025-03-19 16:38:20 -04:00
parent 5137e583ba
commit ac3c47cece
1 changed files with 18 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

19
security/lsm_init.c
View file

@ -363,6 +363,8 @@ int __init early_security_init(void)
{
struct lsm_info *lsm;
/* NOTE: lsm_pr_dbg() doesn't work here as lsm_debug is not yet set */
lsm_early_for_each_raw(lsm) {
lsm_enabled_set(lsm, true);
lsm_order_append(lsm, "early");
@ -385,9 +387,24 @@ int __init security_init(void)
struct lsm_info **lsm;
if (lsm_debug) {
lsm_pr("built-in LSM list: %s\n", lsm_order_builtin);
struct lsm_info *i;
cnt = 0;
lsm_pr("available LSMs: ");
lsm_early_for_each_raw(i)
lsm_pr_cont("%s%s(E)", (cnt++ ? "," : ""), i->id->name);
lsm_for_each_raw(i)
lsm_pr_cont("%s%s", (cnt++ ? "," : ""), i->id->name);
lsm_pr_cont("\n");
lsm_pr("built-in LSM config: %s\n", lsm_order_builtin);
lsm_pr("legacy LSM parameter: %s\n", lsm_order_legacy);
lsm_pr("boot LSM parameter: %s\n", lsm_order_cmdline);
/* see the note about lsm_pr_dbg() in early_security_init() */
lsm_early_for_each_raw(i)
lsm_pr("enabled LSM early:%s\n", i->id->name);
}
if (lsm_order_cmdline) {