a start to credentials c/r
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest7 of 8 patches 5 repliesIn review
7 of 8 patches are in this archive. The cover letter announces 8.
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/8 | cr: break out new_user_ns()include/ kernel/ | +45 | 0 replies | |
| 2/8 | cr: split core function out of some set*{u,g}id functionsinclude/ kernel/ kernel/ | +143 | 0 replies | |
| 3/8 | cr: capabilities: define checkpoint and restore fnsinclude/ kernel/ | +86 | 0 replies | |
| 4/8 | groups: move code to kernel/groups.ckernel/ kernel/ kernel/ | +289 | 0 replies | |
| 5/8 | groups: allow compilation on s390xkernel/ | +1 | 1 reply | |
| 7/8 | cr: restore file->f_credcheckpoint/ include/ | +15 | 0 replies | |
| 8/8 | user namespaces: debug refcountscheckpoint/ include/ kernel/ +1 more | +87 | 0 replies |
Reviews trailers per patch
1 of 7 patches has a Reviewed-by or Acked-by.
| Patch | Serge Hallyn |
|---|---|
| 1/8 | |
| 2/8 | |
| 3/8 | |
| 4/8 | A-b |
| 5/8 | |
| 7/8 | |
| 8/8 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH 0/8] a start to credentials c/r
Following is the next version of the credentials c/r patchset, on top of the c/r patchset atgit://git.ncl.cs.columbia.edu/pub/git/linux-cr.git
It implements checkpoint and restart of user, user namespaces, groups, supplementary groups, and struct cred.
There is a question as to what to do about LSM data at restart. Right now I'm ignoring it, which means that prepare_creds() should ensure that the restart tasks get the context of the task calling sys_restart(). I suspect the right thing to do is to add two new LSM hooks, one which checks current's authorization to restart from the checkpoint file, and one which determines the task->cred->security filed based upon any of:
1. current_security() of the task calling sys_restart()
2. the task->cred->security checkpointed in the ckpt file
3. the ->security of the checkpoint file
Oren, I think this version has all the changes you asked for except for restoring cred info for sysvipc.
thanks,
-serge