Re: [PATCH v30 07/12] landlock: Support filesystem access-control

From: James Morris <jmorris@namei.org>
Date: 2021-03-18 23:14:26
Also in: linux-arch, linux-doc, linux-fsdevel, linux-kselftest, linux-security-module, lkml
Reply to: Mickaël Salaün, 2021-03-16

This commit adds a minimal set of supported filesystem access-control
which doesn't enable to restrict all file-related actions.

It would be great to get some more review/acks on this patch, particularly 
from VFS/FS folk.


-- 
James Morris
[off-list ref]

Mickaël Salaün · 2021-03-16
[PATCH v30 03/12] landlock: Set up the security framework and manage credentials · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 03/12] landlock: Set up the security framework and manage credentials · Kees Cook · 2021-03-19
Re: [PATCH v30 03/12] landlock: Set up the security framework and manage credentials · Mickaël Salaün · 2021-03-19
[PATCH v30 02/12] landlock: Add ruleset and domain management · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 02/12] landlock: Add ruleset and domain management · Kees Cook · 2021-03-19
Re: [PATCH v30 02/12] landlock: Add ruleset and domain management · Mickaël Salaün · 2021-03-19
Re: [PATCH v30 02/12] landlock: Add ruleset and domain management · Kees Cook · 2021-03-19
Re: [PATCH v30 02/12] landlock: Add ruleset and domain management · James Morris · 2021-03-24
Re: [PATCH v30 02/12] landlock: Add ruleset and domain management · Mickaël Salaün · 2021-03-25
Re: [PATCH v30 02/12] landlock: Add ruleset and domain management · Jann Horn · 2021-03-23
[PATCH v30 01/12] landlock: Add object management · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 01/12] landlock: Add object management · Kees Cook · 2021-03-19
Re: [PATCH v30 01/12] landlock: Add object management · Mickaël Salaün · 2021-03-19
[PATCH v30 04/12] landlock: Add ptrace restrictions · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 04/12] landlock: Add ptrace restrictions · Kees Cook · 2021-03-19
[PATCH v30 06/12] fs,security: Add sb_delete hook · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 06/12] fs,security: Add sb_delete hook · Kees Cook · 2021-03-19
[PATCH v30 08/12] landlock: Add syscall implementations · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 08/12] landlock: Add syscall implementations · Kees Cook · 2021-03-19
Re: [PATCH v30 08/12] landlock: Add syscall implementations · Mickaël Salaün · 2021-03-19
Re: [PATCH v30 08/12] landlock: Add syscall implementations · Mickaël Salaün · 2021-03-24
[PATCH v30 09/12] arch: Wire up Landlock syscalls · Mickaël Salaün · 2021-03-16
[PATCH v30 05/12] LSM: Infrastructure management of the superblock · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 05/12] LSM: Infrastructure management of the superblock · Kees Cook · 2021-03-19
[PATCH v30 07/12] landlock: Support filesystem access-control · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · James Morris · 2021-03-18
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · Kees Cook · 2021-03-19
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · Mickaël Salaün · 2021-03-19
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · Mickaël Salaün · 2021-03-23
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · Jann Horn · 2021-03-23
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · Mickaël Salaün · 2021-03-23
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · Jann Horn · 2021-03-23
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · Mickaël Salaün · 2021-03-23
Re: [PATCH v30 07/12] landlock: Support filesystem access-control · Jann Horn · 2021-03-24
[PATCH v30 11/12] samples/landlock: Add a sandbox manager example · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 11/12] samples/landlock: Add a sandbox manager example · Kees Cook · 2021-03-19
[PATCH v30 12/12] landlock: Add user and kernel documentation · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 12/12] landlock: Add user and kernel documentation · Kees Cook · 2021-03-19
Re: [PATCH v30 12/12] landlock: Add user and kernel documentation · Mickaël Salaün · 2021-03-19
Re: [PATCH v30 12/12] landlock: Add user and kernel documentation · Mickaël Salaün · 2021-03-23
Re: [PATCH v30 12/12] landlock: Add user and kernel documentation · Mickaël Salaün · 2021-03-24
[PATCH v30 10/12] selftests/landlock: Add user space tests · Mickaël Salaün · 2021-03-16
Re: [PATCH v30 10/12] selftests/landlock: Add user space tests · Kees Cook · 2021-03-19
Re: [PATCH v30 10/12] selftests/landlock: Add user space tests · Mickaël Salaün · 2021-03-19
Re: [PATCH v30 10/12] selftests/landlock: Add user space tests · Kees Cook · 2021-03-19
Re: [PATCH v30 10/12] selftests/landlock: Add user space tests · Mickaël Salaün · 2021-03-19
James Morris · 2021-03-18
Mickaël Salaün · 2021-03-19
View all 49 messages

`h`	back out one level
`j`	next message in thread / next series-diff position
`k`	previous message in thread / previous series-diff position
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help