Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Stefan Berger <stefanb@xxxxxxxxxxxxx>, linux-integrity@xxxxxxxxxxxxxxx
Subject: Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns
From: Jarkko Sakkinen <jarkko.sakkinen@xxxxxx>
Date: Sat, 11 Dec 2021 16:16:36 +0200
Arc-authentication-results: i=1; ORIGINATING; auth=pass smtp.auth=sakkinen smtp.mailfrom=jarkko.sakkinen@xxxxxx
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=iki.fi; s=meesny; t=1639232197; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=zWK2//QP16YYAKOvxB7SmjTHAav5DJvc4RhNrtLCNuY=; b=h/q1QQqnQYufTz/VSWZnDEytTk3wNcSIu+XrCPAOj0t7g15p74589jP/8f37N8Kpx+0U4S I3/z3cGalEP781aR64ZgFoceBg9622fIqWCWIdjqCYSNZD8d2OdihswIuRwTuE7oB97RhC DirA8wMIIw/wyxDmXc1MnZlWBVdkh+w=
Arc-seal: i=1; s=meesny; d=iki.fi; t=1639232197; a=rsa-sha256; cv=none; b=iyX8mTLK1fK+TH/O0vL6Vp+OfWDoKwmG5zy3iecl9baP3uKwFTL5UzU9mxlm/oegva9tF0 FJK5+NRzQYp5kyYKFj4u1/wMwBcnYh8y8RkgMYDnM0EtLghdDSkC/Gh8bPZ4ndtiQhxJis 3mStMi4Qo/4pE4Y9WB+XG0Wk5sO/Ksk=
Cc: zohar@xxxxxxxxxxxxx, serge@xxxxxxxxxx, christian.brauner@xxxxxxxxxx, containers@xxxxxxxxxxxxxxx, dmitry.kasatkin@xxxxxxxxx, ebiederm@xxxxxxxxxxxx, krzysztof.struczynski@xxxxxxxxxx, roberto.sassu@xxxxxxxxxx, mpeters@xxxxxxxxxx, lhinds@xxxxxxxxxx, lsturman@xxxxxxxxxx, puiterwi@xxxxxxxxxx, jejb@xxxxxxxxxxxxx, jamjoom@xxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, paul@xxxxxxxxxxxxxx, rgb@xxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx, jmorris@xxxxxxxxx, James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
In-reply-to: <20211207202127.1508689-12-stefanb@linux.ibm.com>
References: <20211207202127.1508689-1-stefanb@linux.ibm.com> <20211207202127.1508689-12-stefanb@linux.ibm.com>
User-agent: Evolution 3.42.2

On Tue, 2021-12-07 at 15:21 -0500, Stefan Berger wrote:
> To prepare for virtualization of SecurityFS, use simple_pin_fs and
> simpe_release_fs only when init_user_ns is active.
> 
> Signed-off-by: Stefan Berger <stefanb@xxxxxxxxxxxxx>
> Signed-off-by: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>

What do you mean by virtualization, and how does this prepare
securityfs for it? The commit message should be way more verbose.

/Jarkko

Follow-Ups:
- Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns
  - From: James Bottomley

References:
- [PATCH v4 00/16] ima: Namespace IMA with audit support in IMA-ns
  - From: Stefan Berger
- [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns
  - From: Stefan Berger

Prev by Date: Re: [PATCH v6 14/17] ima: Tie opened SecurityFS files to the IMA namespace it belongs to
Next by Date: Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns
Previous by thread: Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns
Next by thread: Re: [PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns
Index(es):
- Date
- Thread

[Index of Archives] [Cgroups] [Netdev] [Linux Wireless] [Kernel Newbies] [Security] [Linux for Hams] [Netfilter] [Bugtraq] [Yosemite Forum] [MIPS Linux] [ARM Linux] [Linux RAID] [Linux Admin] [Samba]