Re: [PATCH v31 07/12] landlock: Support filesystem access-control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH v31 07/12] landlock: Support filesystem access-control
From: Kees Cook <keescook@xxxxxxxxxxxx>
Date: Wed, 31 Mar 2021 10:50:25 -0700
Cc: Jann Horn <jannh@xxxxxxxxxx>, Al Viro <viro@xxxxxxxxxxxxxxxxxx>, Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>, Andy Lutomirski <luto@xxxxxxxxxxxxxx>, Anton Ivanov <anton.ivanov@xxxxxxxxxxxxxxxxxx>, Arnd Bergmann <arnd@xxxxxxxx>, Casey Schaufler <casey@xxxxxxxxxxxxxxxx>, David Howells <dhowells@xxxxxxxxxx>, Jeff Dike <jdike@xxxxxxxxxxx>, Jonathan Corbet <corbet@xxxxxxx>, Michael Kerrisk <mtk.manpages@xxxxxxxxx>, Richard Weinberger <richard@xxxxxx>, Shuah Khan <shuah@xxxxxxxxxx>, Vincent Dagonneau <vincent.dagonneau@xxxxxxxxxxx>, kernel-hardening@xxxxxxxxxxxxxxxxxx, linux-api@xxxxxxxxxxxxxxx, linux-arch@xxxxxxxxxxxxxxx, linux-doc@xxxxxxxxxxxxxxx, linux-fsdevel@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, linux-kselftest@xxxxxxxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx, x86@xxxxxxxxxx, Mickaël Salaün <mic@xxxxxxxxxxxxxxxxxxx>, James Morris <jmorris@xxxxxxxxx>, "Serge E . Hallyn" <serge@xxxxxxxxxx>
Delivered-to: mailing list kernel-hardening@xxxxxxxxxxxxxxxxxx
In-reply-to: <d2764451-8970-6cbd-e2bf-254a42244ffc@digikod.net>
Mailing-list: contact kernel-hardening-help@xxxxxxxxxxxxxxxxxx; run by ezmlm

On Wed, Mar 31, 2021 at 07:33:50PM +0200, Mickaël Salaün wrote:
> Jann, Kees, are you OK with this patch and the next one?

I don't feel qualified to say it's using the VFS correctly, but given
the extensive testing via gcov and syzkaller, I'm comfortable with it
landing.

I defer to James. :)

-Kees

-- 
Kees Cook

References:
- [PATCH v31 00/12] Landlock LSM
  - From: Mickaël Salaün
- [PATCH v31 07/12] landlock: Support filesystem access-control
  - From: Mickaël Salaün
- Re: [PATCH v31 07/12] landlock: Support filesystem access-control
  - From: Mickaël Salaün

Prev by Date: Re: [PATCH v31 07/12] landlock: Support filesystem access-control
Next by Date: [PATCH v9 0/6] Optionally randomize kernel stack offset each syscall
Previous by thread: Re: [PATCH v31 07/12] landlock: Support filesystem access-control
Next by thread: Re: [PATCH v31 07/12] landlock: Support filesystem access-control
Index(es):
- Date
- Thread

[Index of Archives] [Linux Samsung SoC] [Linux Rockchip SoC] [Linux Actions SoC] [Linux for Synopsys ARC Processors] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux Audio Users] [Yosemite News] [Linux Kernel] [Linux SCSI]