[PATCH v2 00/15] BPF interface for applying Landlock rulesets · Justin Suess <hidden> · 2026-08-31
[PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks · Justin Suess <hidden> · 2026-08-31
Re: [PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks · Casey Schaufler <casey@schaufler-ca.com> · 2026-08-31
Re: [PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks · Justin Suess <hidden> · 2026-08-31
Re: [PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks · Justin Suess <hidden> · 2026-09-02
Re: [PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks · Casey Schaufler <casey@schaufler-ca.com> · 2026-09-02
Re: [PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks · Justin Suess <hidden> · 2026-09-02
[PATCH v2 02/15] lsm: Add the bprm_apply_policy_object LSM hook · Justin Suess <hidden> · 2026-08-31
[PATCH v2 03/15] lsm: Move the lsm_for_each_hook() macro to security/lsm.h · Justin Suess <hidden> · 2026-08-31
[PATCH v2 04/15] lsm: Add the bpf_lsm_policy_release kfunc and policy object destructor · Justin Suess <hidden> · 2026-08-31
[PATCH v2 05/15] lsm: Add the bpf_lsm_policy_from_fd kfunc · Justin Suess <hidden> · 2026-08-31
[PATCH v2 06/15] lsm: Add the bpf_lsm_policy_acquire kfunc · Justin Suess <hidden> · 2026-08-31
[PATCH v2 07/15] lsm: Add the bpf_lsm_policy_apply_bprm kfunc · Justin Suess <hidden> · 2026-08-31
[PATCH v2 08/15] lsm: Document the LSM policy object interface · Justin Suess <hidden> · 2026-08-31
[PATCH v2 09/15] selftests/bpf: Add tests for the LSM policy object kfuncs · Justin Suess <hidden> · 2026-08-31
[PATCH v2 10/15] landlock: Expose the ruleset fd lookup to the rest of Landlock · Justin Suess <hidden> · 2026-08-31
[PATCH v2 11/15] landlock: Factor the credential restriction out of landlock_restrict_self() · Justin Suess <hidden> · 2026-08-31
[PATCH v2 12/15] landlock: Free rulesets after an RCU grace period · Justin Suess <hidden> · 2026-08-31
[PATCH v2 13/15] landlock: Implement the LSM policy object hooks · Justin Suess <hidden> · 2026-08-31
[PATCH v2 14/15] selftests/bpf: Test the LSM policy object kfuncs with Landlock · Justin Suess <hidden> · 2026-08-31
[PATCH v2 15/15] landlock: Document the BPF policy interface · Justin Suess <hidden> · 2026-08-31

Re: [PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks

From: Casey Schaufler <casey@schaufler-ca.com>
Date: 2026-08-31 17:17:58
Also in: bpf, lkml

On 8/31/2026 7:58 AM, Justin Suess wrote:

Add struct lsm_policy_object, the identity an LSM embeds in a policy
object it shares with BPF programs, and the three hooks managing such
an object's lifetime:

I am not seeing the cover letter for this patch set. Are you sending
it to the LSM list? Without that I do not have sufficient context to
comment on the patches (1,2,3 and 8) that you have sent.

What I do see has me quite concerned. It's possible the cover letter
will addresses my issues. If nothing else, I assume it describes what
a "policy object" is, and what it's for.

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help