Re: [PATCH V35 27/29] tracefs: Restrict tracefs when the kernel is locked down

From: Matthew Garrett <hidden>
Date: 2019-07-16 23:22:52
Also in: linux-api, lkml
Reply to: Steven Rostedt, 2019-07-16

On Tue, Jul 16, 2019 at 4:14 PM Steven Rostedt [off-list ref] wrote:

Small nit, but please add this as the first declaration, to keep the
"upside-down x-mas tree" look. I know some of the other functions in
this file don't follow that (which should be cleaned up some day), but
I'd like to avoid adding more that breaks the aesthetic of the code.

ACK.

quoted

+
+     if (fops)

I think you meant "if (!fops)".

Blink. Whoops! Yup.

Matthew Garrett · 2019-07-15
[PATCH V35 01/29] security: Support early LSMs · Matthew Garrett · 2019-07-15
[PATCH V35 02/29] security: Add a "locked down" LSM hook · Matthew Garrett · 2019-07-15
[PATCH V35 03/29] security: Add a static lockdown policy LSM · Matthew Garrett · 2019-07-15
[PATCH V35 04/29] Enforce module signatures if the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 05/29] Restrict /dev/{mem,kmem,port} when the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 08/29] kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE · Matthew Garrett · 2019-07-15
[PATCH V35 12/29] x86: Lock down IO port access when the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 15/29] acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down · Matthew Garrett · 2019-07-15
Re: [PATCH V35 15/29] acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down · Dave Young · 2019-07-16
Re: [PATCH V35 15/29] acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down · Matthew Garrett · 2019-07-16
[PATCH V35 17/29] Prohibit PCMCIA CIS storage when the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 19/29] Lock down module params that specify hardware parameters (eg. ioport) · Matthew Garrett · 2019-07-15
Re: [PATCH V35 19/29] Lock down module params that specify hardware parameters (eg. ioport) · James Morris · 2019-07-15
[PATCH V35 24/29] Lock down perf when in confidentiality mode · Matthew Garrett · 2019-07-15
[PATCH V35 26/29] debugfs: Restrict debugfs when the kernel is locked down · Matthew Garrett · 2019-07-15
Re: [PATCH V35 26/29] debugfs: Restrict debugfs when the kernel is locked down · James Morris · 2019-07-15
[PATCH V35 28/29] efi: Restrict efivar_ssdt_load when the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 29/29] lockdown: Print current->comm in restriction messages · Matthew Garrett · 2019-07-15
[PATCH V35 27/29] tracefs: Restrict tracefs when the kernel is locked down · Matthew Garrett · 2019-07-15
Re: [PATCH V35 27/29] tracefs: Restrict tracefs when the kernel is locked down · Steven Rostedt · 2019-07-16
Re: [PATCH V35 27/29] tracefs: Restrict tracefs when the kernel is locked down · Matthew Garrett · 2019-07-16
[PATCH V35 25/29] kexec: Allow kexec_file() with appropriate IMA policy when locked down · Matthew Garrett · 2019-07-15
[PATCH V35 22/29] Lock down tracing and perf kprobes when in confidentiality mode · Matthew Garrett · 2019-07-15
[PATCH V35 20/29] x86/mmiotrace: Lock down the testmmiotrace module · Matthew Garrett · 2019-07-15
[PATCH V35 23/29] bpf: Restrict bpf when kernel lockdown is in confidentiality mode · Matthew Garrett · 2019-07-15
Re: [PATCH V35 23/29] bpf: Restrict bpf when kernel lockdown is in confidentiality mode · Daniel Borkmann · 2019-07-15
Re: [PATCH V35 23/29] bpf: Restrict bpf when kernel lockdown is in confidentiality mode · Matthew Garrett · 2019-07-16
[PATCH V35 21/29] Lock down /proc/kcore · Matthew Garrett · 2019-07-15
[PATCH V35 18/29] Lock down TIOCSSERIAL · Matthew Garrett · 2019-07-15
[PATCH V35 13/29] x86/msr: Restrict MSR access when the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 16/29] acpi: Disable ACPI table override if the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 14/29] ACPI: Limit access to custom_method when the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 11/29] PCI: Lock down BAR access when the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 09/29] kexec_file: Restrict at runtime if the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 10/29] hibernate: Disable when the kernel is locked down · Matthew Garrett · 2019-07-15
[PATCH V35 07/29] Copy secure_boot flag in boot params across kexec reboot · Matthew Garrett · 2019-07-15
[PATCH V35 06/29] kexec_load: Disable at runtime if the kernel is locked down · Matthew Garrett · 2019-07-15
View all 38 messages

`h`	back out one level
`j`	next message in thread / next series-diff position
`k`	previous message in thread / previous series-diff position
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help