diff options
| author | Mickaël Salaün <mic@digikod.net> | 2024-12-12 18:42:20 +0100 |
|---|---|---|
| committer | Kees Cook <kees@kernel.org> | 2024-12-18 17:00:29 -0800 |
| commit | faf2d88e556756f31d9e2e33f37ce89396ba0f7f (patch) | |
| tree | ee2cfdb9e9248c7566017ab5856cbe476ab484b0 /samples/Kconfig | |
| parent | selftests/landlock: Add tests for execveat + AT_EXECVE_CHECK (diff) | |
| download | linux-faf2d88e556756f31d9e2e33f37ce89396ba0f7f.tar.gz linux-faf2d88e556756f31d9e2e33f37ce89396ba0f7f.zip | |
samples/check-exec: Add set-exec
Add a simple tool to set SECBIT_EXEC_RESTRICT_FILE or
SECBIT_EXEC_DENY_INTERACTIVE before executing a command. This is useful
to easily test against enlighten script interpreters.
Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: Christian Brauner <brauner@kernel.org>
Cc: Kees Cook <keescook@chromium.org>
Cc: Paul Moore <paul@paul-moore.com>
Cc: Serge Hallyn <serge@hallyn.com>
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Link: https://lore.kernel.org/r/20241212174223.389435-6-mic@digikod.net
Signed-off-by: Kees Cook <kees@kernel.org>
Diffstat (limited to 'samples/Kconfig')
| -rw-r--r-- | samples/Kconfig | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/samples/Kconfig b/samples/Kconfig index b288d9991d27..efa28ceadc42 100644 --- a/samples/Kconfig +++ b/samples/Kconfig @@ -291,6 +291,13 @@ config SAMPLE_CGROUP help Build samples that demonstrate the usage of the cgroup API. +config SAMPLE_CHECK_EXEC + bool "Exec secure bits examples" + depends on CC_CAN_LINK && HEADERS_INSTALL + help + Build a tool to easily configure SECBIT_EXEC_RESTRICT_FILE and + SECBIT_EXEC_DENY_INTERACTIVE. + source "samples/rust/Kconfig" endif # SAMPLES |