Skip to content

Safe LSM (un)loading, and immutable hooks

Sargun Dhillon linux-security-module 13 versions – New

Get series with b4
b4 am CAMp4zn-hUTArkb44eLPAac6M2CedAPVpf7qBC2csKqNsdg70YQ@mail.gmail.com

Versions newest first · linked by author and title

  1. v7 Latest posting 8/80 of 6 patches 0 repliesNew
  2. v7 posting 7/80 of 6 patches 0 repliesSuperseded
  3. v7 posting 6/80 of 6 patches 0 repliesSuperseded
Earlier versions · 10
VersionPostedPatchesRepliesStatus
v7 posting 5/80 of 6 patches0 repliesSuperseded
v7 posting 4/80 of 6 patches0 repliesSuperseded
v7 posting 3/80 of 6 patches0 repliesSuperseded
v7 posting 2/80 of 6 patches0 repliesSuperseded
v7 posting 1/86 patches0 repliesSuperseded
v61 patch0 repliesSuperseded
v5 posting 2/21 patch6 repliesSuperseded
v5 posting 1/20 of 1 patch0 repliesSuperseded
v41 patch9 repliesSuperseded
v31 patch7 repliesSuperseded

Patches in v7 posting 8/8 No applies recorded yet

None of the 6 patches the cover letter announces are in this archive.

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v7 yet.

Read the v7 thread

Cover letter [PATCH v7 0/6] Safe LSM (un)loading, and immutable hooks
Quoted 11 lines · James Morris
Quoted 3 lines · Sargun Dhillon

I guess I'm just a little bit frustrated, because, in my mind, some of my patches provide immediate value, and are ready to be reviewed, and or respun.

I'm not seeing much value in this functionality, given that SELinux is the only unloadable LSM, and that is really just an historical workaround which may be normalized at some point.

Patch 1 may be useful on its own.

Do you not think patch 2 is also useful? Is it worth me re-rolling 1-2 independently?

Do you think not think that minor loadable LSMs are valuable? -- And if so, do you think it's okay with, or without guardrails?

Quoted 5 lines

--
James Morris
<[email protected]>

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo at vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html