[PATCH v24 00/12] Landlock LSM · Mickaël Salaün <mic@digikod.net> · 2020-11-12
[PATCH v24 02/12] landlock: Add ruleset and domain management · Mickaël Salaün <mic@digikod.net> · 2020-11-12
Re: [PATCH v24 02/12] landlock: Add ruleset and domain management · James Morris <jmorris@namei.org> · 2020-11-20
Re: [PATCH v24 02/12] landlock: Add ruleset and domain management · Jann Horn <jannh@google.com> · 2020-11-21
Re: [PATCH v24 02/12] landlock: Add ruleset and domain management · Mickaël Salaün <mic@digikod.net> · 2020-11-21
[PATCH v24 06/12] fs,security: Add sb_delete hook · Mickaël Salaün <mic@digikod.net> · 2020-11-12
[PATCH v24 09/12] arch: Wire up Landlock syscalls · Mickaël Salaün <mic@digikod.net> · 2020-11-12
[PATCH v24 12/12] landlock: Add user and kernel documentation · Mickaël Salaün <mic@digikod.net> · 2020-11-12
Re: [PATCH v24 12/12] landlock: Add user and kernel documentation · Jann Horn <jannh@google.com> · 2020-11-21
Re: [PATCH v24 12/12] landlock: Add user and kernel documentation · James Morris <jmorris@namei.org> · 2020-11-24
[PATCH v24 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2020-11-12
Re: [PATCH v24 07/12] landlock: Support filesystem access-control · Jann Horn <jannh@google.com> · 2020-11-21
Re: [PATCH v24 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2020-11-21
Re: [PATCH v24 07/12] landlock: Support filesystem access-control · Jann Horn <jannh@google.com> · 2020-11-23
Re: [PATCH v24 07/12] landlock: Support filesystem access-control · Mickaël Salaün <mic@digikod.net> · 2020-11-23
Re: [PATCH v24 07/12] landlock: Support filesystem access-control · Jann Horn <jannh@google.com> · 2020-11-23
[PATCH v24 11/12] samples/landlock: Add a sandbox manager example · Mickaël Salaün <mic@digikod.net> · 2020-11-12
[PATCH v24 10/12] selftests/landlock: Add user space tests · Mickaël Salaün <mic@digikod.net> · 2020-11-12
[PATCH v24 05/12] LSM: Infrastructure management of the superblock · Mickaël Salaün <mic@digikod.net> · 2020-11-12
[PATCH v24 08/12] landlock: Add syscall implementations · Mickaël Salaün <mic@digikod.net> · 2020-11-12
Re: [PATCH v24 08/12] landlock: Add syscall implementations · Jann Horn <jannh@google.com> · 2020-11-21
[PATCH v24 04/12] landlock: Add ptrace restrictions · Mickaël Salaün <mic@digikod.net> · 2020-11-12
[PATCH v24 01/12] landlock: Add object management · Mickaël Salaün <mic@digikod.net> · 2020-11-12
Re: [PATCH v24 01/12] landlock: Add object management · Jann Horn <jannh@google.com> · 2020-11-21
Re: [PATCH v24 01/12] landlock: Add object management · Mickaël Salaün <mic@digikod.net> · 2020-11-21
[PATCH v24 03/12] landlock: Set up the security framework and manage credentials · Mickaël Salaün <mic@digikod.net> · 2020-11-12
Re: [PATCH v24 00/12] Landlock LSM · James Morris <jmorris@namei.org> · 2020-11-17

Re: [PATCH v24 00/12] Landlock LSM

From: James Morris <jmorris@namei.org>
Date: 2020-11-17 05:39:00
Also in: linux-api, linux-arch, linux-doc, linux-fsdevel, linux-kselftest, lkml

On Thu, 12 Nov 2020, Mickaël Salaün wrote:

Hi,

This patch series simplifies the code, makes stacked access-control more
consistent (from the user point of view), properly handles memory
allocation errors, and adds more tests (covering layered ruleset corner
cases).  Most of these changes were sent as a separate patch series:
https://lore.kernel.org/lkml/20201111213442.434639-1-mic@digikod.net/ (local)

James and Jann, could you please take a look at the main changes
(patches 2, 7 and 8)?

We definitely need more review on these changes that came in. I'll drop 
the previous patchset from my tree and wait until the latest code is fully 
reviewed.

Fundamental locking issues and similar should be worked out before 
submitting for mainline merge.

-- 
James Morris
[off-list ref]

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help