Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock

[PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 07/38] LSM: Introduce "lsm=" for boottime LSM selection · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-26
[PATCH v5 10/38] LSM: Refactor "security=" in terms of enable/disable · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-26
[PATCH v5 11/38] LSM: Separate idea of "major" LSM from "exclusive" LSM · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-26
[PATCH v5 01/38] LSM: Introduce LSM_FLAG_LEGACY_MAJOR · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
Re: [PATCH v5 01/38] LSM: Introduce LSM_FLAG_LEGACY_MAJOR · Kees Cook <hidden> · 2018-11-27
Re: [PATCH v5 01/38] LSM: Introduce LSM_FLAG_LEGACY_MAJOR · Ondrej Mosnacek <omosnace@redhat.com> · 2018-11-28
Re: [PATCH v5 01/38] LSM: Introduce LSM_FLAG_LEGACY_MAJOR · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-28
[PATCH v5 02/38] LSM: Provide separate ordered initialization · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 03/38] LSM: Plumb visibility into optional "enabled" state · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 04/38] LSM: Lift LSM selection out of individual LSMs · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 05/38] LSM: Build ordered list of LSMs to initialize · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 06/38] LSM: Introduce CONFIG_LSM · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 08/38] LSM: Tie enabling logic to presence in ordered list · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 09/38] LSM: Prepare for reorganizing "security=" logic · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 12/38] apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUE · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 13/38] selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUE · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 14/38] LSM: Add all exclusive LSMs to ordered initialization · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 15/38] LSM: Split LSM preparation from initialization · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 16/38] LoadPin: Initialize as ordered LSM · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 17/38] Yama: Initialize as ordered LSM · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 18/38] LSM: Introduce enum lsm_order · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 19/38] capability: Initialize as LSM_ORDER_FIRST · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 20/38] procfs: add smack subdir to attrs · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 21/38] Smack: Abstract use of cred security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 22/38] SELinux: Abstract use of cred security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 23/38] SELinux: Remove cred security blob poisoning · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 25/38] AppArmor: Abstract use of cred security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 26/38] TOMOYO: Abstract use of cred security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 27/38] Infrastructure management of the cred security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 28/38] SELinux: Abstract use of file security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 24/38] SELinux: Remove unused selinux_is_enabled · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 29/38] Smack: Abstract use of file security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 30/38] LSM: Infrastructure management of the file security · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 31/38] SELinux: Abstract use of inode security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 32/38] Smack: Abstract use of inode security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 33/38] LSM: Infrastructure management of the inode security · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 34/38] LSM: Infrastructure management of the task security · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 35/38] SELinux: Abstract use of ipc security blobs · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 36/38] Smack: Abstract use of ipc security blobs · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 37/38] LSM: Infrastructure management of the ipc security blob · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
[PATCH v5 38/38] TOMOYO: Update LSM flags to no longer be exclusive · Casey Schaufler <casey@schaufler-ca.com> · 2018-11-27
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Kees Cook <hidden> · 2018-12-05
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Casey Schaufler <casey@schaufler-ca.com> · 2018-12-05
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · John Johansen <john.johansen@canonical.com> · 2018-12-05
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · James Morris <jmorris@namei.org> · 2018-12-11
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp> · 2018-12-11
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · James Morris <jmorris@namei.org> · 2018-12-12
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Kees Cook <hidden> · 2018-12-11
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Kees Cook <hidden> · 2019-01-08
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · James Morris <jmorris@namei.org> · 2019-01-08
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Casey Schaufler <casey@schaufler-ca.com> · 2019-01-08
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Kees Cook <hidden> · 2019-01-08
Re: [PATCH v5 00/38] LSM: Module stacking for SARA and Landlock · Casey Schaufler <casey@schaufler-ca.com> · 2019-01-08

From: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Date: 2018-12-11 21:02:36

On 2018/12/12 3:57, James Morris wrote:

On Tue, 4 Dec 2018, Kees Cook wrote:

quoted

On Mon, Nov 26, 2018 at 3:22 PM Casey Schaufler [off-list ref] wrote:

quoted

v5: Include Kees Cook's rework of the lsm command
    line interface. Stacking is not conditional.

Can you resend this series with corrected "From:" lines in the body, etc?

Beyond that, I obviously like it. James, what's needed for this to move forward?

If there are no outstanding issues, I plan to merge this for 4.21.

Then, can we send it to linux-next.git shortly
so that we can have some time for testing by syzbot?

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help