lkml.org 
[lkml]   [2020]   [Nov]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH v1 0/9] Landlock fixes
On Wed, 11 Nov 2020, Mickaël Salaün wrote:

> Hi,
>
> This patch series fixes some issues and makes the Landlock filesystem
> access-control more consistent and deterministic when stacking multiple
> rulesets. This is checked by current and new tests. I also extended
> documentation and example to help users.
>
> This series can be applied on top of
> https://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git/log/?h=landlock_lsm

Actually, given the number of fixes here, please respin so we get a
cleaner initial PR for Linus.

>
> Regards,
>
> Mickaël Salaün (9):
> landlock: Fix memory allocation error handling
> landlock: Cosmetic fixes for filesystem management
> landlock: Enforce deterministic interleaved path rules
> landlock: Always intersect access rights
> landlock: Add extra checks when inserting a rule
> selftests/landlock: Extend layout1.inherit_superset
> landlock: Clean up get_ruleset_from_fd()
> landlock: Add help to enable Landlock as a stacked LSM
> landlock: Extend documentation about limitations
>
> Documentation/userspace-api/landlock.rst | 17 +++
> samples/landlock/sandboxer.c | 21 +++-
> security/landlock/Kconfig | 4 +-
> security/landlock/fs.c | 67 +++++-----
> security/landlock/object.c | 5 +-
> security/landlock/ruleset.c | 34 ++---
> security/landlock/syscall.c | 24 ++--
> tools/testing/selftests/landlock/fs_test.c | 140 +++++++++++++++++++--
> 8 files changed, 239 insertions(+), 73 deletions(-)
>
>
> base-commit: 96b3198c4025c11347651700b77e45a686d78553
>

--
James Morris
<jmorris@namei.org>
\
 
 \ /
  Last update: 2020-11-12 06:38    [W:0.054 / U:1.304 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site