Re: [PATCH v31 07/12] landlock: Support filesystem access-control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Mickaël Salaün <mic@xxxxxxxxxxx>
Subject: Re: [PATCH v31 07/12] landlock: Support filesystem access-control
From: Kees Cook <keescook@xxxxxxxxxxxx>
Date: Wed, 31 Mar 2021 10:50:25 -0700
Cc: Jann Horn <jannh@xxxxxxxxxx>, Al Viro <viro@xxxxxxxxxxxxxxxxxx>, Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>, Andy Lutomirski <luto@xxxxxxxxxxxxxx>, Anton Ivanov <anton.ivanov@xxxxxxxxxxxxxxxxxx>, Arnd Bergmann <arnd@xxxxxxxx>, Casey Schaufler <casey@xxxxxxxxxxxxxxxx>, David Howells <dhowells@xxxxxxxxxx>, Jeff Dike <jdike@xxxxxxxxxxx>, Jonathan Corbet <corbet@xxxxxxx>, Michael Kerrisk <mtk.manpages@xxxxxxxxx>, Richard Weinberger <richard@xxxxxx>, Shuah Khan <shuah@xxxxxxxxxx>, Vincent Dagonneau <vincent.dagonneau@xxxxxxxxxxx>, kernel-hardening@xxxxxxxxxxxxxxxxxx, linux-api@xxxxxxxxxxxxxxx, linux-arch@xxxxxxxxxxxxxxx, linux-doc@xxxxxxxxxxxxxxx, linux-fsdevel@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, linux-kselftest@xxxxxxxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx, x86@xxxxxxxxxx, Mickaël Salaün <mic@xxxxxxxxxxxxxxxxxxx>, James Morris <jmorris@xxxxxxxxx>, "Serge E . Hallyn" <serge@xxxxxxxxxx>
In-reply-to: <d2764451-8970-6cbd-e2bf-254a42244ffc@digikod.net>

On Wed, Mar 31, 2021 at 07:33:50PM +0200, Mickaël Salaün wrote:
> Jann, Kees, are you OK with this patch and the next one?

I don't feel qualified to say it's using the VFS correctly, but given
the extensive testing via gcov and syzkaller, I'm comfortable with it
landing.

I defer to James. :)

-Kees

-- 
Kees Cook

References:
- [PATCH v31 00/12] Landlock LSM
  - From: Mickaël Salaün
- [PATCH v31 07/12] landlock: Support filesystem access-control
  - From: Mickaël Salaün
- Re: [PATCH v31 07/12] landlock: Support filesystem access-control
  - From: Mickaël Salaün

Prev by Date: Re: [PATCH v31 07/12] landlock: Support filesystem access-control
Next by Date: Re: [PATCH v2 1/4] kvm: cpuid: adjust the returned nent field of kvm_cpuid2 for KVM_GET_SUPPORTED_CPUID and KVM_GET_EMULATED_CPUID
Previous by thread: Re: [PATCH v31 07/12] landlock: Support filesystem access-control
Next by thread: Re: [PATCH v31 07/12] landlock: Support filesystem access-control
Index(es):
- Date
- Thread

[Index of Archives] [Linux Wireless] [Linux Kernel] [ATH6KL] [Linux Bluetooth] [Linux Netdev] [Kernel Newbies] [Share Photos] [IDE] [Security] [Git] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Linux ATA RAID] [Samba] [Device Mapper]