Skip to content

LSM checkpoint/restart: introduction

Serge E. Hallyn containers selinux 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest4 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/4cr: define ckpt_debug if CONFIG_CHECKPOINT=ninclude/linux/checkpoint.h+3 -00 replies
2/4cr: add generic LSM c/r supportDocumentation/checkpoint/readme.txt checkpoint/checkpoint.c checkpoint/files.c +15 more+705 -230 replies
3/4cr: add smack support to lsm c/rcheckpoint/restart.c security/security.c security/smack/smack.h +2 more+234 -00 replies
4/4cr: add selinux supportcheckpoint/restart.c security/selinux/hooks.c security/selinux/include/av_perm_to_string.h +1 more+392 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/4] LSM checkpoint/restart: introduction

Following is a respin of the LSM checkpoint/restart patchset, hopefully addressing most of the feedback I've gotten.

The patchset includes one (1/4) patch which is not directly LSM-related, one (2/4) which implements the generic LSM c/r support, one (3/4) implementing support for Smack, one (4/4) implementing support for SELinux, and one (1/1) updating the userspace program which initiates restart.

At this point I'm hoping to get some acks and get them pushed to the c/r kernel tree, which is branch ckpt-v17-dev in
git://git.ncl.cs.columbia.edu/pub/git/linux-cr.git/. Comments are of course appreciated. Once they sit in the tree for a bit, I'll tackle the socket related LSM c/r.

thanks,
-serge