[RFC v2 00/19] ima: Namespace IMA with audit support in IMA-ns · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 01/19] ima: Add IMA namespace support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 02/19] ima: Define ns_status for storing namespaced iint data · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 06/19] ima: Move policy related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 07/19] ima: Move ima_htable into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 04/19] ima: Move delayed work queue and variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 03/19] ima: Namespace audit status flags · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 12/19] securityfs: Pass static variables as parameters from top level functions · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 10/19] ima: Implement hierarchical processing of file accesses · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 14/19] ima: Move some IMA policy and filesystem related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 08/19] ima: Move measurement list related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 11/19] securityfs: Prefix global variables with securityfs_ · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 16/19] ima: Use integrity_admin_ns_capable() to check corresponding capability · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 13/19] securityfs: Extend securityfs with namespacing support · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 09/19] ima: Only accept AUDIT rules for IMA non-init_ima_ns namespaces for now · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 15/19] capabilities: Introduce CAP_INTEGRITY_ADMIN · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
Re: [RFC v2 15/19] capabilities: Introduce CAP_INTEGRITY_ADMIN · Casey Schaufler <casey@schaufler-ca.com> · 2021-12-03
Re: [RFC v2 15/19] capabilities: Introduce CAP_INTEGRITY_ADMIN · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 17/19] userns: Introduce a refcount variable for calling early teardown function · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 19/19] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · James Bottomley <hidden> · 2021-12-03
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · James Bottomley <hidden> · 2021-12-03
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-04
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · James Bottomley <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · James Bottomley <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Casey Schaufler <casey@schaufler-ca.com> · 2021-12-03
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · James Bottomley <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · James Bottomley <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · James Bottomley <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · Christian Brauner <hidden> · 2021-12-06
Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace · James Bottomley <hidden> · 2021-12-06
[RFC v2 05/19] ima: Move IMA's keys queue related variables into ima_namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03
[RFC v2 18/19] ima/userns: Define early teardown function for IMA namespace · Stefan Berger <stefanb@linux.ibm.com> · 2021-12-03

Re: [RFC v2 19/19] ima: Setup securityfs for IMA namespace

From: Stefan Berger <stefanb@linux.ibm.com>
Date: 2021-12-06 17:22:29
Also in: linux-integrity, lkml

On 12/6/21 09:11, James Bottomley wrote:

On Mon, 2021-12-06 at 09:03 -0500, Stefan Berger wrote:

It's never too early to see what the series is shaping up as.  However,
I'm still not sure I got the right trigger for the SECURITYFS_NS_ADD
notifier, so that may still have to move ... or even that there isn't
some locking subtlety I missed in triggering SECURITY_NS_REMOVE from
kill_sb.

I'll post v3 with the early changes and your Signed-off-by's added where I made changes to files.

   Stefan

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help