Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754321AbdGUPlN (ORCPT ); Fri, 21 Jul 2017 11:41:13 -0400 Received: from mail-lf0-f67.google.com ([209.85.215.67]:37563 "EHLO mail-lf0-f67.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753853AbdGUPkb (ORCPT ); Fri, 21 Jul 2017 11:40:31 -0400 MIME-Version: 1.0 X-Originating-IP: [108.49.102.27] In-Reply-To: References: <1500416736-49829-1-git-send-email-keescook@chromium.org> <1500416736-49829-5-git-send-email-keescook@chromium.org> From: Paul Moore Date: Fri, 21 Jul 2017 11:40:29 -0400 Message-ID: Subject: Re: [PATCH v3 04/15] selinux: Refactor to remove bprm_secureexec hook To: Kees Cook Cc: Stephen Smalley , Andrew Morton , David Howells , "Eric W. Biederman" , John Johansen , "Serge E. Hallyn" , Casey Schaufler , Tetsuo Handa , James Morris , Andy Lutomirski , Linus Torvalds , "linux-fsdevel@vger.kernel.org" , linux-security-module , LKML Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1189 Lines: 25 On Thu, Jul 20, 2017 at 4:42 PM, Paul Moore wrote: > On Thu, Jul 20, 2017 at 1:06 PM, Kees Cook wrote: >> On Thu, Jul 20, 2017 at 6:42 AM, Paul Moore wrote: >>> Alternatively, if you've got a fairly recent git repo with all the >>> patches merged I can build a test kernel and give it a shot for you, >>> although fair warning it may take a day or two for me to get to it. >> >> Hurm, I think this will take quite a bit of time for me to set up. :P >> If you have a chance, I'd appreciate it if you could test the series. >> It's currently based on v4.12: >> https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git/log/?h=kspp/setuid-rlimits/secureexec-no-hook >> >> If it doesn't work out or takes too much time I can work on setting up >> the test environment next week (travelling at the moment). > > Building a kernel now, in case anyone on Fedora wants to play with it, > you can find it here (when it finishes): > > * https://copr.fedorainfracloud.org/coprs/pcmoore/kernel-testing/build/581947 Quick follow up, the kernel above passes the selinux-testsuite atsecure test. -- paul moore www.paul-moore.com