Re: [PATCH v31 07/12] landlock: Support filesystem access-control

[PATCH v31 00/12] Landlock LSM · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 02/12] landlock: Add ruleset and domain management · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 01/12] landlock: Add object management · Mickaël Salaün <mic@digikod.net> · 2021-03-24
Re: [PATCH v31 01/12] landlock: Add object management · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 03/12] landlock: Set up the security framework and manage credentials · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 04/12] landlock: Add ptrace restrictions · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 06/12] fs,security: Add sb_delete hook · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 05/12] LSM: Infrastructure management of the superblock · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2021-03-24
Re: [PATCH v31 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2021-03-31
Re: [PATCH v31 07/12] landlock: Support filesystem access-control · Kees Cook <hidden> · 2021-03-31
Re: [PATCH v31 07/12] landlock: Support filesystem access-control · Al Viro <viro@zeniv.linux.org.uk> · 2021-04-01
Re: [PATCH v31 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2021-04-01
[PATCH v31 08/12] landlock: Add syscall implementations · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 09/12] arch: Wire up Landlock syscalls · Mickaël Salaün <mic@digikod.net> · 2021-03-24
[PATCH v31 12/12] landlock: Add user and kernel documentation · Mickaël Salaün <mic@digikod.net> · 2021-03-24
Re: [PATCH v31 12/12] landlock: Add user and kernel documentation · Kees Cook <hidden> · 2021-03-26
[PATCH v31 10/12] selftests/landlock: Add user space tests · Mickaël Salaün <mic@digikod.net> · 2021-03-24
Re: [PATCH v31 10/12] selftests/landlock: Add user space tests · Kees Cook <hidden> · 2021-03-26
[PATCH v31 11/12] samples/landlock: Add a sandbox manager example · Mickaël Salaün <mic@digikod.net> · 2021-03-24

From: Kees Cook <hidden>
Date: 2021-03-31 17:51:16
Also in: linux-arch, linux-doc, linux-fsdevel, linux-kselftest, linux-security-module, lkml

On Wed, Mar 31, 2021 at 07:33:50PM +0200, Mickaël Salaün wrote:

Jann, Kees, are you OK with this patch and the next one?

I don't feel qualified to say it's using the VFS correctly, but given
the extensive testing via gcov and syzkaller, I'm comfortable with it
landing.

I defer to James. :)

-Kees

-- 
Kees Cook

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help