Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs... | linux-integrity

[PATCH v4 00/16] ima: Namespace IMA with audit support in IMA-ns · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 01/16] ima: Add IMA namespace support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
Re: [PATCH v4 01/16] ima: Add IMA namespace support · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 01/16] ima: Add IMA namespace support · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 01/16] ima: Add IMA namespace support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-08
[PATCH v4 02/16] ima: Define ns_status for storing namespaced iint data · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 03/16] ima: Namespace audit status flags · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 04/16] ima: Move delayed work queue and variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 05/16] ima: Move IMA's keys queue related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 06/16] ima: Move policy related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 07/16] ima: Move ima_htable into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 08/16] ima: Move measurement list related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 09/16] ima: Only accept AUDIT rules for IMA non-init_ima_ns namespaces for now · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 10/16] ima: Implement hierarchical processing of file accesses · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
Re: [PATCH v4 10/16] ima: Implement hierarchical processing of file accesses · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 10/16] ima: Implement hierarchical processing of file accesses · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 10/16] ima: Implement hierarchical processing of file accesses · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-08
Re: [PATCH v4 10/16] ima: Implement hierarchical processing of file accesses · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-08
Re: [PATCH v4 10/16] ima: Implement hierarchical processing of file accesses · Mimi Zohar <zohar@linux.ibm.com> · 2021-12-15
Re: [PATCH v4 10/16] ima: Implement hierarchical processing of file accesses · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-16
[PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-08
Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns · Jarkko Sakkinen <hidden> · 2021-12-11
Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns · James Bottomley <James.Bottomley@HansenPartnership.com> · 2021-12-11
[PATCH v4 12/16] securityfs: Extend securityfs with namespacing support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 13/16] ima: Move some IMA policy and filesystem related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 14/16] ima: Use mac_admin_ns_capable() to check corresponding capability · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
Re: [PATCH v4 14/16] ima: Use mac_admin_ns_capable() to check corresponding capability · Christian Brauner <hidden> · 2021-12-08
[PATCH v4 15/16] ima: Move dentries into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
[PATCH v4 16/16] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-07
Re: [PATCH v4 16/16] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 16/16] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 16/16] ima: Setup securityfs for IMA namespace · James Bottomley <James.Bottomley@HansenPartnership.com> · 2021-12-08
Re: [PATCH v4 16/16] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 16/16] ima: Setup securityfs for IMA namespace · James Bottomley <James.Bottomley@HansenPartnership.com> · 2021-12-08
Re: [PATCH v4 16/16] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-08
Re: [PATCH v4 16/16] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-08
Re: [PATCH v4 16/16] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-08

Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns

From: Jarkko Sakkinen <hidden>
Date: 2021-12-11 14:17:02
Also in: linux-security-module, lkml

On Tue, 2021-12-07 at 15:21 -0500, Stefan Berger wrote:

To prepare for virtualization of SecurityFS, use simple_pin_fs and
simpe_release_fs only when init_user_ns is active.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

What do you mean by virtualization, and how does this prepare
securityfs for it? The commit message should be way more verbose.

/Jarkko

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help