Re: [PATCH v22 05/12] LSM: Infrastructure management of the superblock

[PATCH v22 00/12] Landlock LSM · Mickaël Salaün <mic@digikod.net> · 2020-10-27
[PATCH v22 03/12] landlock: Set up the security framework and manage credentials · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 03/12] landlock: Set up the security framework and manage credentials · Jann Horn <jannh@google.com> · 2020-10-29
[PATCH v22 04/12] landlock: Add ptrace restrictions · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 04/12] landlock: Add ptrace restrictions · Jann Horn <jannh@google.com> · 2020-10-29
[PATCH v22 05/12] LSM: Infrastructure management of the superblock · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 05/12] LSM: Infrastructure management of the superblock · James Morris <jmorris@namei.org> · 2020-10-29
[PATCH v22 08/12] landlock: Add syscall implementations · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 08/12] landlock: Add syscall implementations · Jann Horn <jannh@google.com> · 2020-10-29
Re: [PATCH v22 08/12] landlock: Add syscall implementations · Mickaël Salaün <mic@digikod.net> · 2020-10-29
Re: [PATCH v22 08/12] landlock: Add syscall implementations · Jann Horn <jannh@google.com> · 2020-10-30
Re: [PATCH v22 08/12] landlock: Add syscall implementations · Mickaël Salaün <mic@digikod.net> · 2020-10-30
[PATCH v22 12/12] landlock: Add user and kernel documentation · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 12/12] landlock: Add user and kernel documentation · Jann Horn <jannh@google.com> · 2020-10-29
Re: [PATCH v22 12/12] landlock: Add user and kernel documentation · Mickaël Salaün <mic@digikod.net> · 2020-10-29
[PATCH v22 10/12] selftests/landlock: Add user space tests · Mickaël Salaün <mic@digikod.net> · 2020-10-27
[PATCH v22 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 07/12] landlock: Support filesystem access-control · Jann Horn <jannh@google.com> · 2020-10-29
Re: [PATCH v22 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2020-10-29
Re: [PATCH v22 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2020-11-03
[PATCH v22 06/12] fs,security: Add sb_delete hook · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 06/12] fs,security: Add sb_delete hook · Jann Horn <jannh@google.com> · 2020-10-29
Re: [PATCH v22 06/12] fs,security: Add sb_delete hook · James Morris <jmorris@namei.org> · 2020-10-29
[PATCH v22 11/12] samples/landlock: Add a sandbox manager example · Mickaël Salaün <mic@digikod.net> · 2020-10-27
[PATCH v22 02/12] landlock: Add ruleset and domain management · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 02/12] landlock: Add ruleset and domain management · Jann Horn <jannh@google.com> · 2020-10-29
Re: [PATCH v22 02/12] landlock: Add ruleset and domain management · Mickaël Salaün <mic@digikod.net> · 2020-10-29
[PATCH v22 09/12] arch: Wire up Landlock syscalls · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 09/12] arch: Wire up Landlock syscalls · James Morris <jmorris@namei.org> · 2020-10-29
[PATCH v22 01/12] landlock: Add object management · Mickaël Salaün <mic@digikod.net> · 2020-10-27
Re: [PATCH v22 01/12] landlock: Add object management · Jann Horn <jannh@google.com> · 2020-10-29
Re: [PATCH v22 01/12] landlock: Add object management · Mickaël Salaün <mic@digikod.net> · 2020-10-29
Re: [PATCH v22 01/12] landlock: Add object management · Jann Horn <jannh@google.com> · 2020-10-30
Re: [PATCH v22 01/12] landlock: Add object management · Pavel Machek <hidden> · 2020-11-16
Re: [PATCH v22 01/12] landlock: Add object management · Mickaël Salaün <mic@digikod.net> · 2020-11-16
Re: [PATCH v22 00/12] Landlock LSM · Jann Horn <jannh@google.com> · 2020-10-29
Re: [PATCH v22 00/12] Landlock LSM · Mickaël Salaün <mic@digikod.net> · 2020-10-29

From: James Morris <jmorris@namei.org>
Date: 2020-10-29 02:03:06
Also in: linux-arch, linux-doc, linux-fsdevel, linux-kselftest, linux-security-module, lkml

On Tue, 27 Oct 2020, Mickaël Salaün wrote:

From: Casey Schaufler <casey@schaufler-ca.com>

Move management of the superblock->sb_security blob out of the
individual security modules and into the security infrastructure.
Instead of allocating the blobs from within the modules, the modules
tell the infrastructure how much space is required, and the space is
allocated there.

Cc: Kees Cook <redacted>
Cc: John Johansen <john.johansen@canonical.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Mickaël Salaün <redacted>
Reviewed-by: Stephen Smalley <stephen.smalley.work@gmail.com>

It would be good to see review from JJ here.

-- 
James Morris
[off-list ref]

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help