lua-lsm: support loadable API producers - #26

Open

chenzongyao200127 wants to merge 150 commits into

openanolis:lua-lsmfrom

chenzongyao200127:lua-lsm-per-lib-ko

Commits on Mar 24, 2026

Revert "gen_init_cpio: attempt copy_file_range for file data"
uudiin
committed
d3b90d8
macos: use gnu-sed instead of sed
uudiin
committed
dd7dd7e
build on macOS with Apple Silicon
uudiin
committed
6fe169b
file: Call security_file_alloc() after initializing the filp
uudiin
committed
f62891f
x86/lib: Add setjmp/longjmp implementation
uudiin
committed
c855d13
arm64/lib: Add setjmp/longjmp implementation
uudiin
committed
d91f876
lib: Introduced Lua 5.1 language interpreter
uudiin
committed
77abccc
headers: move to common directory
uudiin
committed
89edf7c
include: lua - fixes for kernel
uudiin
committed
590dd95
lib: lua - fixes
uudiin
committed
3f709af
lib: lua - add makefile
uudiin
committed
6f2930d
lib: lua - remove unused files from Makefile
uudiin
committed
7b6f290
lib: build lua library
uudiin
committed
0ad2265
lua-lsm: lib - add queue/tree/bitmap header
uudiin
committed
0704b3c
lua-lsm: lib - fixes for build on linux
uudiin
committed
0edf337
lua-lsm: add common auxiliary library
uudiin
committed
cbcd244
lua-lsm: add type definition header files
uudiin
committed
ebc332f
lua-lsm: api - add commonly used constant definitions
uudiin
committed
9a34db7
lua-lsm: api - add kernel library
uudiin
committed
eac9574
lua-lsm: api - add filesystem library
uudiin
committed
67f1cc4
lua-lsm: api - add net library
uudiin
committed
df875ca
lua-lsm: Wrapper all LSM functions
uudiin
committed
3bef0ac
security: Add Lua based LSM
uudiin
committed
f5ee236
lua-lsm: Fix deadlock on modules_lock
uudiin
committed
b7f983f
lua-lsm: Fix potential deadlock
uudiin
committed
5252b52
lua-lsm: optimizate dict free
uudiin
committed
5e4644f
lua-lsm: dont swap the module and Lua VM memeory
uudiin
committed
d9a4446
lua-lsm: add DEBUG config
uudiin
committed
c3db729
lua-lsm: kvcache - Dont disable irq on lock
uudiin
committed
2840f9b
lua-lsm: kvcache - kmalloc in atomic context
uudiin
committed
3da7919
lua-lsm: display more information on unregister
uudiin
committed
b79078e
lua-lsm: Donot initialize securityfs if LSM is not initialized
uudiin
committed
c10e915
lua-lsm: fix: prevent returning true for non-existent key

HOCOOH
authored and
uudiin
committed
5c8aec4
lua-lsm: api - add securebits

HOCOOH
authored and
uudiin
committed
7d48dee
lua-lsm: add refcount.h
uudiin
committed
43f7d46
lua-lsm: kvcache - Remove table type
uudiin
committed
a8e90c6
lua-lsm: kvcache - lock on node
uudiin
committed
e9ce649
lua-lsm: kvcache - Remove string type
uudiin
committed
124e21c
lua-lsm: replace tailq with linux list
uudiin
committed
71dfc5d
lua-lsm: lockess modules with srcu
uudiin
committed
d37570c
lua-lsm: lockess shdict with rcu
uudiin
committed
669358a
lua-lsm: kvcache - Eliminating Inconsistent Locks
uudiin
committed
f4a6d8e
lua-lsm: always show traceback
uudiin
committed
e2b1efc
lua-lsm: use separate Lua VM for softirq
uudiin
committed
24d94a5
lua-lsm: remove rcu api
uudiin
committed
31b296c
lua-lsm: Add missing updates for exist node
uudiin
committed
d906986
lua-lsm: Fix mismatched build configuration name
uudiin
committed
b235c17
lua-lsm: Fix crash caused by incomplete kvnodes free when module is unloaded
uudiin
committed
edc8336
lua-lsm: add refcount to per task LuaVM
uudiin
committed
2d69260
lua-lsm: Fixes srcu read on modules list
uudiin
committed
e9a9386
lua-lsm: add loaded_count for lua_module
uudiin
committed
1e43476
lua-lsm: safe unregister module under freeze LuaVM
uudiin
committed
a79c1d4
lua-lsm: Synchronize kvnode garbage collection
uudiin
committed
c86bc1c
lua-lsm: Fixed invalid pointer when multi-unregister busy module
uudiin
committed
48d40ee
lua-lsm: Avoid recursive calls to the capable
uudiin
committed
cc7e8fb
lua-lsm: api - exepath/cmdline and inode mode
uudiin
committed
de28578
lua-lsm: pretty show lsm_funcs & module
uudiin
committed
a772302
lua-lsm: Make tostring overloadable
uudiin
committed
fe489b2
lua-lsm: add extra two metatables for raw and gc object
uudiin
committed
d69f677
lua-lsm: Strengthen file object using layered metatables
uudiin
committed
308d791
lua-lsm: Simplify module register function
uudiin
committed
ef40c03
lua-lsm: rename lua_module to lua_lsm_module
uudiin
committed
e7137b5
lua-lsm: Fixes for object missing environment
uudiin
committed
d65fe9a
lua-lsm: api - make sockaddr readable
uudiin
committed
166b195
lua-lsm: Add type() method for all userdata
uudiin
committed
91ccd2c
lua-lsm: Rewrite statistics codes
uudiin
committed
6f63f2f
lua-lsm: refactor securityfs
uudiin
committed
aaf2eb8
lua-lsm: api - Keep semantic consistency with math.random
uudiin
committed
16a5eaa
lua-lsm: add has_kvcache result for type method
uudiin
committed
6a4e278
lua-lsm: extend api
uudiin
committed
faef660
lua-lsm: silent key/ib/tundev/perfevent kvcache
uudiin
committed
c430d42
fix(lua-lsm): Resolve missing header dependencies for x86_64 build

chenzongyao200127
authored and
uudiin
committed
656f37b
lua-lsm: add pid_alive method & inode_init_security_anon hook
uudiin
committed
0d72757
lua-lsm: simplify module environment for userdata
uudiin
committed
b28c709
lua-lsm: pretty show sockaddr
uudiin
committed
b9f6e75
lua-lsm: Count with atomic64_t
uudiin
committed
dbb7b7f
lua-lsm: return busy if task alloc_lock held

chenzongyao200127
authored and
uudiin
committed
2a66d0b
lua-lsm: add lvm pool support

chenzongyao200127
authored and
uudiin
committed
b220126
lua-lsm: reset pooled VM modules by table keys

chenzongyao200127
authored and
uudiin
committed
b261699
lua-lsm: add lua-lsm documentation

chenzongyao200127
authored and
uudiin
committed
4936ad1
lua-lsm: add bdev_setintegrity payload handling

chenzongyao200127
authored and
uudiin
committed
fd30df4
lua-lsm: Port from 6.17 to 6.19
uudiin
committed
c12d17c

Commits on Mar 26, 2026

lua-lsm: style cleanups

chenzongyao200127
authored and
tianjia.ztj
committed
b593b90
lua-lsm: auxlib: add forward declarations

chenzongyao200127
authored and
tianjia.ztj
committed
da0cbb4
lua-lsm: auxlib: guard optional path buffer free

chenzongyao200127
authored and
tianjia.ztj
committed
b40a8ba

Commits on Mar 30, 2026

lua-lsm: rename debug symbol to avoid allyesconfig conflict
chenzongyao200127
committed
fb90bbf

Commits on Apr 1, 2026

lib: expose LUA in Kconfig
chenzongyao200127
committed
cd33b81
docs: update Lua-LSM config docs
chenzongyao200127
committed
12a7d0e

Commits on Apr 10, 2026

lua-lsm: guard blob-backed object access on rollback
chenzongyao200127
committed
6ef700d

Commits on Apr 15, 2026

lua-lsm: Correct header file pach

chenzongyao200127
authored and
uudiin
committed
295eb05

Commits on Apr 16, 2026

lua-lsm: move hook stats accounting to percpu
chenzongyao200127
committed
c47e272

Commits on Apr 21, 2026

lua-lsm: make lvm pool size configurable

chenzongyao200127
authored and
uudiin
committed
fdfff25
docs: document Lua-LSM lvm pool cmdline

chenzongyao200127
authored and
uudiin
committed
da2d7ac
lua-lsm: set default lvm pool size to 32

chenzongyao200127
authored and
uudiin
committed
8ce60df

Commits on Apr 28, 2026

lua-lsm: stop registering legacy procattr hooks

chenzongyao200127
authored and
uudiin
committed
1169633
lua-lsm: do not register lsmprop_to_secctx

chenzongyao200127
authored and
uudiin
committed
05260f9
lua-lsm: hide unsupported hooks from modules and introspection

chenzongyao200127
authored and
uudiin
committed
85d88b5
docs: describe Lua-LSM supported hook surface

chenzongyao200127
authored and
uudiin
committed
2a921f7

Commits on May 11, 2026

Commits on May 12, 2026

macos: make git config core.symlinks to true
uudiin
committed
583c9b9
lua: rewrite kconfig dependencies
uudiin
committed
0d1bb50

Commits on May 14, 2026

lua-lsm: put looked-up task after descendant walk

chenzongyao200127
authored and
uudiin
committed
4eded36
lua-lsm: validate numeric capability arguments

chenzongyao200127
authored and
uudiin
committed
3dcc78f
lua-lsm: return nil for missing wrapped objects

chenzongyao200127
authored and
uudiin
committed
3ab7fe1
lua-lsm: don't store filp_open errors in file userdata

chenzongyao200127
authored and
uudiin
committed
e686d3b
lua-lsm: fix length handling for Lua string buffers

chenzongyao200127
authored and
uudiin
committed
9224ea6
lua-lsm: wait for SRCU readers before freeing module

chenzongyao200127
authored and
uudiin
committed
2d8b56b

Commits on Jun 2, 2026

lua-lsm: skip empty kvcache dict free

chenzongyao200127
authored and
uudiin
committed
89c7c42
lua-lsm: add inode_setattr attributes

chenzongyao200127
authored and
uudiin
committed
edd577f
lua-lsm: reset dirty VMs on task exit

chenzongyao200127
authored and
uudiin
committed
62c211d
lua-lsm: add userns support for capable hook

chenzongyao200127
authored and
uudiin
committed
4056faa
lua-lsm: expose kernel file load ids to Lua hooks

chenzongyao200127
authored and
uudiin
committed
bce7f36
lua-lsm: drop redundant size args for file data hooks

chenzongyao200127
authored and
uudiin
committed
db377f6

Commits on Jun 3, 2026

lua-lsm: skip hook dispatch when no modules are live

chenzongyao200127
authored and
uudiin
committed
94ca411
lua-lsm: build per-task Lua VM lazily on first dispatch

chenzongyao200127
authored and
uudiin
committed
e364bd1
lua-lsm: fail hook dispatch when lazy VM allocation fails

chenzongyao200127
authored and
uudiin
committed
13735cf
lua-lsm: avoid lazy VM creation during unregister

chenzongyao200127
authored and
uudiin
committed
2761705
lua-lsm: separate dispatch failures from hook results

chenzongyao200127
authored and
uudiin
committed
58eaddb
lua-lsm: hide xfrm_state_pol_flow_match hook

chenzongyao200127
authored and
uudiin
committed
2258f71
lua-lsm: fix lazy VM first-use publication

chenzongyao200127
authored and
uudiin
committed
1b99b60

Commits on Jun 11, 2026

lua-lsm: allocate task VM state on first use

chenzongyao200127
authored and
uudiin
committed
fd56e1f
lua-lsm: initialize kvcache dictionaries lazily

chenzongyao200127
authored and
uudiin
committed
f91050d
lua-lsm: skip inactive hook dispatch earlier

chenzongyao200127
authored and
uudiin
committed
917bfa1
lua-lsm: gate inactive cleanup after policy load

chenzongyao200127
authored and
uudiin
committed
4f1995e
lua-lsm: avoid softirq reentry during lazy kvcache init

chenzongyao200127
authored and
uudiin
committed
e227ede

Commits on Jun 16, 2026

lua-lsm: export helpers for API producer modules
chenzongyao200127
committed
0a88b51
lua-lsm: add API library registration ABI
chenzongyao200127
committed
9ae24b6

Commits on Jun 17, 2026

lua-lsm: add API library metatable installer
chenzongyao200127
committed
c393f96
lua-lsm: add API library registry implementation
chenzongyao200127
committed
0b19786
lua-lsm: wire core to API library registry
chenzongyao200127
committed
25174da
lua-lsm: convert kernel API library to producer
chenzongyao200127
committed
47947fe
lua-lsm: convert fs API library to producer
chenzongyao200127
committed
ac6a60b
lua-lsm: convert net API library to producer
chenzongyao200127
committed
13afd8a
lua-lsm: convert errno API library to producer
chenzongyao200127
committed
623d516
lua-lsm: convert capability API library to producer
chenzongyao200127
committed
c7fd04e
lua-lsm: convert signal API library to producer
chenzongyao200127
committed
d3f7d24
docs: document lua-lsm API library registration
chenzongyao200127
committed
a7e7aa9
lua-lsm: decrement nloaded on every VM destruction
chenzongyao200127
committed
398cb45
lua-lsm: exempt built-in producers from the lockdown gate
chenzongyao200127
committed
a7fc1b2
lua-lsm: rename lvm_state_from_lua_state helper
chenzongyao200127
committed
ad49323
lua-lsm: rename loaded-module put helper
chenzongyao200127
committed
19eb0b1
lua-lsm: clarify lvm state ownership cleanup
chenzongyao200127
committed
36786cf
lua-lsm: require module signatures for signed API gate
chenzongyao200127
committed
cb0869a
lua-lsm: stamp replayed API library VMs
chenzongyao200127
committed
f7120eb
lua-lsm: rebuild stale task VMs on demand
chenzongyao200127
committed
a8d32f8
docs: document out-of-tree Lua API producers
chenzongyao200127
committed
601cdce
lua-lsm: expose API library registry in securityfs
chenzongyao200127
committed
d0350cc

Commits on Jul 7, 2026

lua-lsm: harden API library registration
chenzongyao200127
committed
fdaa9c5