cr: support LSM credentials
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest3 patches 0 repliesNew
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | cr: checkpoint the active LSM and add RESTART_KEEP_LSM flagDocumentation/ checkpoint/ checkpoint/ +5 more | +70 | 0 replies | |
| 2/3 | cr: add generic LSM c/r supportcheckpoint/ checkpoint/ checkpoint/ +11 more | +506 | 0 replies | |
| 3/3 | cr: add smack support to lsm c/rcheckpoint/ security/ security/ | +99 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH 0/3] cr: support LSM credentials
Here is my current code for lsm c/r support. I'll be out a good part of next week, but intend to spend the next few weeks doing proper selinux implementation, working on the comments for these earlier patches, and writing some automated tests. These patches seem solid on my setup, and shouldn't hurt anything to have in the tree for testing. I'm punting on the SELinux code this week bc testing it requires a lot more userspace tweaking to properly test. That means that if you have an SELinux-enabled kernel, you will be able to use mktree without -k as usual to get default labeling, but mktree -k < out will return -ENOSYS.
I'm not sending to linux-kernel-module or selinux lists because that will require writing patch intros describing c/r again etc...
-serge