Re: [PATCH v30 07/12] landlock: Support filesystem access-control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH v30 07/12] landlock: Support filesystem access-control
From: James Morris <jmorris@xxxxxxxxx>
Date: Fri, 19 Mar 2021 10:10:35 +1100 (AEDT)
Cc: Jann Horn <jannh@xxxxxxxxxx>, "Serge E . Hallyn" <serge@xxxxxxxxxx>, Al Viro <viro@xxxxxxxxxxxxxxxxxx>, Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>, Andy Lutomirski <luto@xxxxxxxxxxxxxx>, Anton Ivanov <anton.ivanov@xxxxxxxxxxxxxxxxxx>, Arnd Bergmann <arnd@xxxxxxxx>, Casey Schaufler <casey@xxxxxxxxxxxxxxxx>, David Howells <dhowells@xxxxxxxxxx>, Jeff Dike <jdike@xxxxxxxxxxx>, Jonathan Corbet <corbet@xxxxxxx>, Kees Cook <keescook@xxxxxxxxxxxx>, Michael Kerrisk <mtk.manpages@xxxxxxxxx>, Richard Weinberger <richard@xxxxxx>, Shuah Khan <shuah@xxxxxxxxxx>, Vincent Dagonneau <vincent.dagonneau@xxxxxxxxxxx>, kernel-hardening@xxxxxxxxxxxxxxxxxx, linux-api@xxxxxxxxxxxxxxx, linux-arch@xxxxxxxxxxxxxxx, linux-doc@xxxxxxxxxxxxxxx, linux-fsdevel@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, linux-kselftest@xxxxxxxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx, x86@xxxxxxxxxx, Mickaël Salaün <mic@xxxxxxxxxxxxxxxxxxx>
Delivered-to: mailing list kernel-hardening@xxxxxxxxxxxxxxxxxx
In-reply-to: <20210316204252.427806-8-mic@digikod.net>
Mailing-list: contact kernel-hardening-help@xxxxxxxxxxxxxxxxxx; run by ezmlm

> This commit adds a minimal set of supported filesystem access-control
> which doesn't enable to restrict all file-related actions.

It would be great to get some more review/acks on this patch, particularly 
from VFS/FS folk.


-- 
James Morris
<jmorris@xxxxxxxxx>

References:
- [PATCH v30 00/12] Landlock LSM
  - From: Mickaël Salaün
- [PATCH v30 07/12] landlock: Support filesystem access-control
  - From: Mickaël Salaün

Prev by Date: Re: Fine-grained Forward CFI on top of Intel CET / IBT
Next by Date: Re: [PATCH v30 00/12] Landlock LSM
Previous by thread: [PATCH v30 07/12] landlock: Support filesystem access-control
Next by thread: Re: [PATCH v30 07/12] landlock: Support filesystem access-control
Index(es):
- Date
- Thread

[Index of Archives] [Linux Samsung SoC] [Linux Rockchip SoC] [Linux Actions SoC] [Linux for Synopsys ARC Processors] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux Audio Users] [Yosemite News] [Linux Kernel] [Linux SCSI]