LoadPin: Allow filesystem switch when not enforcing
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest4 patches 1 replyIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/4 | LoadPin: Refactor read-only check into a helpersecurity/ | +21 | 0 replies | |
| 2/4 | LoadPin: Refactor sysctl initializationsecurity/ | +19 | 0 replies | |
| 3/4 | LoadPin: Move pin reporting cleanly out of lockingsecurity/ | +6 | 0 replies | |
| 4/4 | LoadPin: Allow filesystem switch when not enforcingsecurity/ | +11 | 0 replies |
Reviews trailers per patch
None of the 4 patches has a Reviewed-by or Acked-by of their own; the series has one for all of them.
| Patch | Serge Hallyn |
|---|---|
| Series | R-b |
| 1/4 | |
| 2/4 | |
| 3/4 | |
| 4/4 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH 0/4] LoadPin: Allow filesystem switch when not enforcing
Hi,
Right now, LoadPin isn't much use on general purpose distros since modules tend to be loaded from multiple filesystems at boot (first initramfs, then real rootfs). Allow the potential mount pin to move when enforcement is not enabled.
-Kees
Kees Cook (4):
LoadPin: Refactor read-only check into a helper
LoadPin: Refactor sysctl initialization
LoadPin: Move pin reporting cleanly out of locking
LoadPin: Allow filesystem switch when not enforcing
security/loadpin/loadpin.c | 89 ++++++++++++++++++++++---------------- 1 file changed, 52 insertions(+), 37 deletions(-)
Signature · 1 line
2.34.1