Re: [PATCH security-next v5 00/30] LSM: Explict ordering

From: Casey Schaufler <casey@schaufler-ca.com>
Date: 2018-11-14 21:05:01
Also in: linux-arch, linux-doc
Reply to: Kees Cook, 2018-10-24

On 10/24/2018 1:12 PM, Kees Cook wrote:

On Wed, Oct 24, 2018 at 1:56 AM, Casey Schaufler [off-list ref] wrote:

quoted

On 10/23/2018 12:05 PM, Casey Schaufler wrote:

quoted

On 10/23/2018 11:50 AM, Kees Cook wrote:

quoted

Did you poke around at my combined series?
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git/log/?h=lsm/ordering-v6-blob-sharing

I hope to do that on the plane later today.

I had a chance to poke at the combined series and it
all seems to work as advertised.

/me stares at John, Paul, and Stephen. Hurry up and get off your planes! ;)

-Kees

Now that we have next-general updated I'm porting these forward.

Kees Cook · 2018-10-11
[PATCH security-next v5 03/30] LSM: Rename .security_initcall section to .lsm_info · Kees Cook · 2018-10-11
[PATCH security-next v5 02/30] vmlinux.lds.h: Avoid copy/paste of security_init section · Kees Cook · 2018-10-11
[PATCH security-next v5 04/30] LSM: Remove initcall tracing · Kees Cook · 2018-10-11
[PATCH security-next v5 01/30] LSM: Correctly announce start of LSM initialization · Kees Cook · 2018-10-11
[PATCH security-next v5 08/30] LSM: Record LSM name in struct lsm_info · Kees Cook · 2018-10-11
[PATCH security-next v5 05/30] LSM: Convert from initcall to struct lsm_info · Kees Cook · 2018-10-11
[PATCH security-next v5 09/30] LSM: Provide init debugging infrastructure · Kees Cook · 2018-10-11
[PATCH security-next v5 11/30] LSM: Introduce LSM_FLAG_LEGACY_MAJOR · Kees Cook · 2018-10-11
[PATCH security-next v5 12/30] LSM: Provide separate ordered initialization · Kees Cook · 2018-10-11
Re: [PATCH security-next v5 12/30] LSM: Provide separate ordered initialization · Mimi Zohar · 2018-11-02
Re: [PATCH security-next v5 12/30] LSM: Provide separate ordered initialization · Kees Cook · 2018-11-02
Re: [PATCH security-next v5 12/30] LSM: Provide separate ordered initialization · Mimi Zohar · 2018-11-05
[PATCH security-next v5 13/30] LoadPin: Rename boot param "enabled" to "enforce" · Kees Cook · 2018-10-11
[PATCH security-next v5 21/30] LSM: Refactor "security=" in terms of enable/disable · Kees Cook · 2018-10-11
[PATCH security-next v5 16/30] LSM: Build ordered list of LSMs to initialize · Kees Cook · 2018-10-11
[PATCH security-next v5 15/30] LSM: Lift LSM selection out of individual LSMs · Kees Cook · 2018-10-11
[PATCH security-next v5 14/30] LSM: Plumb visibility into optional "enabled" state · Kees Cook · 2018-10-11
[PATCH security-next v5 10/30] LSM: Don't ignore initialization failures · Kees Cook · 2018-10-11
[PATCH security-next v5 06/30] vmlinux.lds.h: Move LSM_TABLE into INIT_DATA · Kees Cook · 2018-10-11
[PATCH security-next v5 07/30] LSM: Convert security_initcall() into DEFINE_LSM() · Kees Cook · 2018-10-11
[PATCH security-next v5 18/30] LSM: Introduce "lsm=" for boottime LSM selection · Kees Cook · 2018-10-11
[PATCH security-next v5 24/30] selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUE · Kees Cook · 2018-10-11
[PATCH security-next v5 30/30] capability: Initialize as LSM_ORDER_FIRST · Kees Cook · 2018-10-11
[PATCH security-next v5 25/30] LSM: Add all exclusive LSMs to ordered initialization · Kees Cook · 2018-10-11
[PATCH security-next v5 23/30] apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUE · Kees Cook · 2018-10-11
[PATCH security-next v5 22/30] LSM: Separate idea of "major" LSM from "exclusive" LSM · Kees Cook · 2018-10-11
[PATCH security-next v5 19/30] LSM: Tie enabling logic to presence in ordered list · Kees Cook · 2018-10-11
[PATCH security-next v5 20/30] LSM: Prepare for reorganizing "security=" logic · Kees Cook · 2018-10-11
[PATCH security-next v5 28/30] Yama: Initialize as ordered LSM · Kees Cook · 2018-10-11
[PATCH security-next v5 27/30] LoadPin: Initialize as ordered LSM · Kees Cook · 2018-10-11
[PATCH security-next v5 26/30] LSM: Split LSM preparation from initialization · Kees Cook · 2018-10-11
[PATCH security-next v5 17/30] LSM: Introduce CONFIG_LSM · Kees Cook · 2018-10-11
[PATCH security-next v5 29/30] LSM: Introduce enum lsm_order · Kees Cook · 2018-10-11
James Morris · 2018-10-11
Kees Cook · 2018-10-11
James Morris · 2018-10-11
Kees Cook · 2018-10-11
Jordan Glover · 2018-10-11
Kees Cook · 2018-10-11
John Johansen · 2018-10-11
Jordan Glover · 2018-10-12
John Johansen · 2018-10-12
Jordan Glover · 2018-10-12
John Johansen · 2018-10-12
Kees Cook · 2018-10-12
Casey Schaufler · 2018-10-23
Kees Cook · 2018-10-23
Casey Schaufler · 2018-10-23
Casey Schaufler · 2018-10-24
Kees Cook · 2018-10-24
Casey Schaufler · 2018-11-14
Casey Schaufler · 2018-11-20
Jordan Glover · 2018-10-11
John Johansen · 2018-10-12
Jordan Glover · 2018-10-12
John Johansen · 2018-10-12
View all 57 messages

`h`	back out one level
`j`	next message in thread / next series-diff position
`k`	previous message in thread / previous series-diff position
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help