lua-lsm: add skb payload accessors and hand out only full socks - #31

Open

chenzongyao200127 wants to merge 139 commits into

openanolis:lua-lsmfrom

chenzongyao200127:lua-lsm-skb-accessors

Commits on Mar 24, 2026

Revert "gen_init_cpio: attempt copy_file_range for file data"
uudiin
committed
d3b90d8
macos: use gnu-sed instead of sed
uudiin
committed
dd7dd7e
build on macOS with Apple Silicon
uudiin
committed
6fe169b
file: Call security_file_alloc() after initializing the filp
uudiin
committed
f62891f
x86/lib: Add setjmp/longjmp implementation
uudiin
committed
c855d13
arm64/lib: Add setjmp/longjmp implementation
uudiin
committed
d91f876
lib: Introduced Lua 5.1 language interpreter
uudiin
committed
77abccc
headers: move to common directory
uudiin
committed
89edf7c
include: lua - fixes for kernel
uudiin
committed
590dd95
lib: lua - fixes
uudiin
committed
3f709af
lib: lua - add makefile
uudiin
committed
6f2930d
lib: lua - remove unused files from Makefile
uudiin
committed
7b6f290
lib: build lua library
uudiin
committed
0ad2265
lua-lsm: lib - add queue/tree/bitmap header
uudiin
committed
0704b3c
lua-lsm: lib - fixes for build on linux
uudiin
committed
0edf337
lua-lsm: add common auxiliary library
uudiin
committed
cbcd244
lua-lsm: add type definition header files
uudiin
committed
ebc332f
lua-lsm: api - add commonly used constant definitions
uudiin
committed
9a34db7
lua-lsm: api - add kernel library
uudiin
committed
eac9574
lua-lsm: api - add filesystem library
uudiin
committed
67f1cc4
lua-lsm: api - add net library
uudiin
committed
df875ca
lua-lsm: Wrapper all LSM functions
uudiin
committed
3bef0ac
security: Add Lua based LSM
uudiin
committed
f5ee236
lua-lsm: Fix deadlock on modules_lock
uudiin
committed
b7f983f
lua-lsm: Fix potential deadlock
uudiin
committed
5252b52
lua-lsm: optimizate dict free
uudiin
committed
5e4644f
lua-lsm: dont swap the module and Lua VM memeory
uudiin
committed
d9a4446
lua-lsm: add DEBUG config
uudiin
committed
c3db729
lua-lsm: kvcache - Dont disable irq on lock
uudiin
committed
2840f9b
lua-lsm: kvcache - kmalloc in atomic context
uudiin
committed
3da7919
lua-lsm: display more information on unregister
uudiin
committed
b79078e
lua-lsm: Donot initialize securityfs if LSM is not initialized
uudiin
committed
c10e915
lua-lsm: fix: prevent returning true for non-existent key

HOCOOH
authored and
uudiin
committed
5c8aec4
lua-lsm: api - add securebits

HOCOOH
authored and
uudiin
committed
7d48dee
lua-lsm: add refcount.h
uudiin
committed
43f7d46
lua-lsm: kvcache - Remove table type
uudiin
committed
a8e90c6
lua-lsm: kvcache - lock on node
uudiin
committed
e9ce649
lua-lsm: kvcache - Remove string type
uudiin
committed
124e21c
lua-lsm: replace tailq with linux list
uudiin
committed
71dfc5d
lua-lsm: lockess modules with srcu
uudiin
committed
d37570c
lua-lsm: lockess shdict with rcu
uudiin
committed
669358a
lua-lsm: kvcache - Eliminating Inconsistent Locks
uudiin
committed
f4a6d8e
lua-lsm: always show traceback
uudiin
committed
e2b1efc
lua-lsm: use separate Lua VM for softirq
uudiin
committed
24d94a5
lua-lsm: remove rcu api
uudiin
committed
31b296c
lua-lsm: Add missing updates for exist node
uudiin
committed
d906986
lua-lsm: Fix mismatched build configuration name
uudiin
committed
b235c17
lua-lsm: Fix crash caused by incomplete kvnodes free when module is unloaded
uudiin
committed
edc8336
lua-lsm: add refcount to per task LuaVM
uudiin
committed
2d69260
lua-lsm: Fixes srcu read on modules list
uudiin
committed
e9a9386
lua-lsm: add loaded_count for lua_module
uudiin
committed
1e43476
lua-lsm: safe unregister module under freeze LuaVM
uudiin
committed
a79c1d4
lua-lsm: Synchronize kvnode garbage collection
uudiin
committed
c86bc1c
lua-lsm: Fixed invalid pointer when multi-unregister busy module
uudiin
committed
48d40ee
lua-lsm: Avoid recursive calls to the capable
uudiin
committed
cc7e8fb
lua-lsm: api - exepath/cmdline and inode mode
uudiin
committed
de28578
lua-lsm: pretty show lsm_funcs & module
uudiin
committed
a772302
lua-lsm: Make tostring overloadable
uudiin
committed
fe489b2
lua-lsm: add extra two metatables for raw and gc object
uudiin
committed
d69f677
lua-lsm: Strengthen file object using layered metatables
uudiin
committed
308d791
lua-lsm: Simplify module register function
uudiin
committed
ef40c03
lua-lsm: rename lua_module to lua_lsm_module
uudiin
committed
e7137b5
lua-lsm: Fixes for object missing environment
uudiin
committed
d65fe9a
lua-lsm: api - make sockaddr readable
uudiin
committed
166b195
lua-lsm: Add type() method for all userdata
uudiin
committed
91ccd2c
lua-lsm: Rewrite statistics codes
uudiin
committed
6f63f2f
lua-lsm: refactor securityfs
uudiin
committed
aaf2eb8
lua-lsm: api - Keep semantic consistency with math.random
uudiin
committed
16a5eaa
lua-lsm: add has_kvcache result for type method
uudiin
committed
6a4e278
lua-lsm: extend api
uudiin
committed
faef660
lua-lsm: silent key/ib/tundev/perfevent kvcache
uudiin
committed
c430d42
fix(lua-lsm): Resolve missing header dependencies for x86_64 build

chenzongyao200127
authored and
uudiin
committed
656f37b
lua-lsm: add pid_alive method & inode_init_security_anon hook
uudiin
committed
0d72757
lua-lsm: simplify module environment for userdata
uudiin
committed
b28c709
lua-lsm: pretty show sockaddr
uudiin
committed
b9f6e75
lua-lsm: Count with atomic64_t
uudiin
committed
dbb7b7f
lua-lsm: return busy if task alloc_lock held

chenzongyao200127
authored and
uudiin
committed
2a66d0b
lua-lsm: add lvm pool support

chenzongyao200127
authored and
uudiin
committed
b220126
lua-lsm: reset pooled VM modules by table keys

chenzongyao200127
authored and
uudiin
committed
b261699
lua-lsm: add lua-lsm documentation

chenzongyao200127
authored and
uudiin
committed
4936ad1
lua-lsm: add bdev_setintegrity payload handling

chenzongyao200127
authored and
uudiin
committed
fd30df4
lua-lsm: Port from 6.17 to 6.19
uudiin
committed
c12d17c

Commits on Mar 26, 2026

lua-lsm: style cleanups

chenzongyao200127
authored and
tianjia.ztj
committed
b593b90
lua-lsm: auxlib: add forward declarations

chenzongyao200127
authored and
tianjia.ztj
committed
da0cbb4
lua-lsm: auxlib: guard optional path buffer free

chenzongyao200127
authored and
tianjia.ztj
committed
b40a8ba

Commits on Mar 30, 2026

lua-lsm: rename debug symbol to avoid allyesconfig conflict
chenzongyao200127
committed
fb90bbf

Commits on Apr 1, 2026

lib: expose LUA in Kconfig
chenzongyao200127
committed
cd33b81
docs: update Lua-LSM config docs
chenzongyao200127
committed
12a7d0e

Commits on Apr 10, 2026

lua-lsm: guard blob-backed object access on rollback
chenzongyao200127
committed
6ef700d

Commits on Apr 15, 2026

lua-lsm: Correct header file pach

chenzongyao200127
authored and
uudiin
committed
295eb05

Commits on Apr 16, 2026

lua-lsm: move hook stats accounting to percpu
chenzongyao200127
committed
c47e272

Commits on Apr 21, 2026

lua-lsm: make lvm pool size configurable

chenzongyao200127
authored and
uudiin
committed
fdfff25
docs: document Lua-LSM lvm pool cmdline

chenzongyao200127
authored and
uudiin
committed
da2d7ac
lua-lsm: set default lvm pool size to 32

chenzongyao200127
authored and
uudiin
committed
8ce60df

Commits on Apr 28, 2026

lua-lsm: stop registering legacy procattr hooks

chenzongyao200127
authored and
uudiin
committed
1169633
lua-lsm: do not register lsmprop_to_secctx

chenzongyao200127
authored and
uudiin
committed
05260f9
lua-lsm: hide unsupported hooks from modules and introspection

chenzongyao200127
authored and
uudiin
committed
85d88b5
docs: describe Lua-LSM supported hook surface

chenzongyao200127
authored and
uudiin
committed
2a921f7

Commits on May 11, 2026

Commits on May 12, 2026

macos: make git config core.symlinks to true
uudiin
committed
583c9b9
lua: rewrite kconfig dependencies
uudiin
committed
0d1bb50

Commits on May 14, 2026

lua-lsm: put looked-up task after descendant walk

chenzongyao200127
authored and
uudiin
committed
4eded36
lua-lsm: validate numeric capability arguments

chenzongyao200127
authored and
uudiin
committed
3dcc78f
lua-lsm: return nil for missing wrapped objects

chenzongyao200127
authored and
uudiin
committed
3ab7fe1
lua-lsm: don't store filp_open errors in file userdata

chenzongyao200127
authored and
uudiin
committed
e686d3b
lua-lsm: fix length handling for Lua string buffers

chenzongyao200127
authored and
uudiin
committed
9224ea6
lua-lsm: wait for SRCU readers before freeing module

chenzongyao200127
authored and
uudiin
committed
2d8b56b

Commits on Jun 2, 2026

lua-lsm: skip empty kvcache dict free

chenzongyao200127
authored and
uudiin
committed
89c7c42
lua-lsm: add inode_setattr attributes

chenzongyao200127
authored and
uudiin
committed
edd577f
lua-lsm: reset dirty VMs on task exit

chenzongyao200127
authored and
uudiin
committed
62c211d
lua-lsm: add userns support for capable hook

chenzongyao200127
authored and
uudiin
committed
4056faa
lua-lsm: expose kernel file load ids to Lua hooks

chenzongyao200127
authored and
uudiin
committed
bce7f36
lua-lsm: drop redundant size args for file data hooks

chenzongyao200127
authored and
uudiin
committed
db377f6

Commits on Jun 3, 2026

lua-lsm: skip hook dispatch when no modules are live

chenzongyao200127
authored and
uudiin
committed
94ca411
lua-lsm: build per-task Lua VM lazily on first dispatch

chenzongyao200127
authored and
uudiin
committed
e364bd1
lua-lsm: fail hook dispatch when lazy VM allocation fails

chenzongyao200127
authored and
uudiin
committed
13735cf
lua-lsm: avoid lazy VM creation during unregister

chenzongyao200127
authored and
uudiin
committed
2761705
lua-lsm: separate dispatch failures from hook results

chenzongyao200127
authored and
uudiin
committed
58eaddb
lua-lsm: hide xfrm_state_pol_flow_match hook

chenzongyao200127
authored and
uudiin
committed
2258f71
lua-lsm: fix lazy VM first-use publication

chenzongyao200127
authored and
uudiin
committed
1b99b60

Commits on Jun 11, 2026

lua-lsm: allocate task VM state on first use

chenzongyao200127
authored and
uudiin
committed
fd56e1f
lua-lsm: initialize kvcache dictionaries lazily

chenzongyao200127
authored and
uudiin
committed
f91050d
lua-lsm: skip inactive hook dispatch earlier

chenzongyao200127
authored and
uudiin
committed
917bfa1
lua-lsm: gate inactive cleanup after policy load

chenzongyao200127
authored and
uudiin
committed
4f1995e
lua-lsm: avoid softirq reentry during lazy kvcache init

chenzongyao200127
authored and
uudiin
committed
e227ede

Commits on Jul 22, 2026

lua-lsm: add file_mprotect VMA object

chenzongyao200127
authored and
uudiin
committed
d4eb48a
lua-lsm: hide more unsupported hooks

chenzongyao200127
authored and
uudiin
committed
8306d36
lua-lsm: drop eager kvcache dict init

chenzongyao200127
authored and
uudiin
committed
f1f9de7
lua-lsm: keep the idle hook path frame-free

chenzongyao200127
authored and
uudiin
committed
d840a0e

Commits on Jul 23, 2026

lua-lsm: drop eager kvcache dict init in task_blob_init

chenzongyao200127
authored and
uudiin
committed
9523402

Commits on Aug 3, 2026

lua-lsm: add audit.log() for security events

chenzongyao200127
authored and
uudiin
committed
739dc27

Commits on Aug 4, 2026

lua-lsm: add skb payload accessors
chenzongyao200127
committed
6e33dbf
doc: lua-lsm: describe skb and sock net accessors
chenzongyao200127
committed
3cb5e90