blob: 98522e0e1ee23278f8ffbe2aa4b6ad1a46e09f1e [file] [log] [blame]
Kees Cook504f2312017-05-13 04:51:43 -07001=================================
2Linux Security Module Development
3=================================
4
5Based on https://lkml.org/lkml/2007/10/26/215,
6a new LSM is accepted into the kernel when its intent (a description of
7what it tries to protect against and in what cases one would expect to
Tom Saegerc7f66402017-10-10 12:36:30 -05008use it) has been appropriately documented in ``Documentation/security/LSM.rst``.
Kees Cook504f2312017-05-13 04:51:43 -07009This allows an LSM's code to be easily compared to its goals, and so
10that end users and distros can make a more informed decision about which
11LSMs suit their requirements.
12
13For extensive documentation on the available LSM hook interfaces, please
14see ``include/linux/lsm_hooks.h``.