Re: [PATCH v5 08/12] evm: Pass user namespace to set/remove xattr hooks

[PATCH v5 00/12] evm: Improve usability of portable signatures · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
[PATCH v5 01/12] evm: Execute evm_inode_init_security() only when an HMAC key is loaded · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
[PATCH v5 02/12] evm: Load EVM key in ima_load_x509() to avoid appraisal · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
[PATCH v5 03/12] evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
Re: [PATCH v5 03/12] evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded · Mimi Zohar <zohar@linux.ibm.com> · 2021-04-30
[PATCH v5 04/12] ima: Move ima_reset_appraise_flags() call to post hooks · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
Re: [PATCH v5 04/12] ima: Move ima_reset_appraise_flags() call to post hooks · Casey Schaufler <casey@schaufler-ca.com> · 2021-04-07
RE: [PATCH v5 04/12] ima: Move ima_reset_appraise_flags() call to post hooks · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
Re: [PATCH v5 04/12] ima: Move ima_reset_appraise_flags() call to post hooks · Mimi Zohar <zohar@linux.ibm.com> · 2021-04-26
[PATCH v5 05/12] evm: Introduce evm_status_revalidate() · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
[PATCH v5 07/12] evm: Allow xattr/attr operations for portable signatures · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
Re: [PATCH v5 07/12] evm: Allow xattr/attr operations for portable signatures · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-03
RE: [PATCH v5 07/12] evm: Allow xattr/attr operations for portable signatures · Roberto Sassu <roberto.sassu@huawei.com> · 2021-05-04
Re: [PATCH v5 07/12] evm: Allow xattr/attr operations for portable signatures · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-04
[PATCH v5 06/12] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
Re: [PATCH v5 06/12] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-03
RE: [PATCH v5 06/12] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe · Roberto Sassu <roberto.sassu@huawei.com> · 2021-05-03
Re: [PATCH v5 06/12] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-03
RE: [PATCH v5 06/12] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe · Roberto Sassu <roberto.sassu@huawei.com> · 2021-05-03
Re: [PATCH v5 06/12] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-03
RE: [PATCH v5 06/12] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe · Roberto Sassu <roberto.sassu@huawei.com> · 2021-05-04
Re: [PATCH v5 06/12] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-04
[PATCH v5 08/12] evm: Pass user namespace to set/remove xattr hooks · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
Re: [PATCH v5 08/12] evm: Pass user namespace to set/remove xattr hooks · Christian Brauner <hidden> · 2021-04-07
[PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
Re: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Christian Brauner <hidden> · 2021-04-07
Re: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · kernel test robot <hidden> · 2021-04-07
Re: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · kernel test robot <hidden> · 2021-04-07
[RESEND][PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
Re: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-03
RE: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Roberto Sassu <roberto.sassu@huawei.com> · 2021-05-03
Re: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-03
RE: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Roberto Sassu <roberto.sassu@huawei.com> · 2021-05-03
RE: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Roberto Sassu <roberto.sassu@huawei.com> · 2021-05-03
Re: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-03
RE: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Roberto Sassu <roberto.sassu@huawei.com> · 2021-05-03
Re: [PATCH v5 09/12] evm: Allow setxattr() and setattr() for unmodified metadata · Mimi Zohar <zohar@linux.ibm.com> · 2021-05-03
[PATCH v5 10/12] ima: Allow imasig requirement to be satisfied by EVM portable signatures · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
[PATCH v5 11/12] ima: Introduce template field evmsig and write to field sig as fallback · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07
[PATCH v5 12/12] ima: Don't remove security.ima if file must not be appraised · Roberto Sassu <roberto.sassu@huawei.com> · 2021-04-07

From: Christian Brauner <hidden>
Date: 2021-04-07 12:07:12
Also in: linux-fsdevel, linux-security-module, lkml

On Wed, Apr 07, 2021 at 12:52:48PM +0200, Roberto Sassu wrote:

In preparation for 'evm: Allow setxattr() and setattr() for unmodified
metadata', this patch passes mnt_userns to the inode set/remove xattr hooks
so that the GID of the inode on an idmapped mount is correctly determined
by posix_acl_update_mode().

Cc: Christian Brauner <redacted>
Cc: Andreas Gruenbacher <agruenba@redhat.com>
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
---

Looks good,
Reviewed-by: Christian Brauner <redacted>

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help