Received: by 2002:ac0:a582:0:0:0:0:0 with SMTP id m2-v6csp4266746imm; Mon, 8 Oct 2018 18:40:49 -0700 (PDT) X-Google-Smtp-Source: ACcGV61qFxIAPV0mqY3jRBe6uB67/mJjjCkkkYNQqyA/7SSwirKPi4wk8nFaNduEoONelue2Sbe8 X-Received: by 2002:a63:a362:: with SMTP id v34-v6mr23969580pgn.261.1539049248980; Mon, 08 Oct 2018 18:40:48 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1539049248; cv=none; d=google.com; s=arc-20160816; b=xqGiX8a94/AhWtQ73V+6TjD2TZfkiaKdFZD+ZFQWNjFPm36PrZq6Y3zKpKvMTB8vhY OjT2akK9J8t6rbjd7glxzGELexRTe/LL35fdLfZTHTzpRUv0Nit0bXaIMBnwdp4tcCso smigTFzk5961gtIKqjBQl4OnkFdyigGmSyG0i0ZrSM9QrAyrzcsZU2AauYBGYx9+vQP8 MC9WLg9+N6dJ4APcJWyfPYdjuF9yAjfSDtgJeZmYFcFKJvX47Mc/TDHlMey+X9v4CgOy f315JTLDoYzqrdEhbtoTcbkQLXmnMXgW1OF7kSuJHkGUvNEnpP/66PNgbxznTMCtauhK 0wDg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :references:in-reply-to:mime-version:dkim-signature; bh=7qA+dtOcdI9urqDaS/IIx7h3l7wueuGPmWbY8bS/3GU=; b=Sax32KHgCYU5Ftz0yubZjFgbGaWwDnVxnnnLcQgN4ZH6z5+EN8R4WL5BVku/FdcGaM 25Fiaw1Pu6F3J66LKx3U78rqHWku25Id442Mth2af9V0B1Daao8dad0ausHD+CodC+Ul iRtEo+RKRCPKyCB9mVx9mEOMaE7C5oyVvSC37/o0v2+EMbgX/OQjWkyrRDScz5JVmeX9 lmxCANnE/+f1l5oUYupDq+2XaO8seyXSKdYQEFT9DRGIBZ7k52OW6cJ6ILQQkh9GrK3P roeBlZIlB2K1wampjkjrGGdaFnYg2kbadHK0ZUEw4JjFKFTJGjvlChfFM+52I583GuMX yDJw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=Cr7d8QAz; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id t21-v6si19671227pgn.56.2018.10.08.18.40.34; Mon, 08 Oct 2018 18:40:48 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=Cr7d8QAz; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726692AbeJIIyl (ORCPT + 99 others); Tue, 9 Oct 2018 04:54:41 -0400 Received: from mail-yw1-f65.google.com ([209.85.161.65]:37847 "EHLO mail-yw1-f65.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726510AbeJIIyl (ORCPT ); Tue, 9 Oct 2018 04:54:41 -0400 Received: by mail-yw1-f65.google.com with SMTP id y14-v6so8903879ywa.4 for ; Mon, 08 Oct 2018 18:40:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=7qA+dtOcdI9urqDaS/IIx7h3l7wueuGPmWbY8bS/3GU=; b=Cr7d8QAz0kukYdX0iBqB5KVdL/yUDjRmOJyD2dc6Vca6WvhfsP421Td/pzu5oqOyHg vWlxQnjXCC7v55mqc/rDdr5wc7MeIxqZ7muGiZA+v5x01nSspt/SnK8V1DwKWl6Gkwbm uO8CQq0kdGPN3kyueDJcm9Vjm72pamEF8xH0g= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=7qA+dtOcdI9urqDaS/IIx7h3l7wueuGPmWbY8bS/3GU=; b=F1ufE37nhHYAYOLUz8KDUFLKFmng7YmKslBM/mrHMwAqt1H2PLLbNtnqLSNfOakzts LGp40O+yEFp6k+iSfVh2M3j5vVSWS6dtTfrWjLa3IYkyv3jUyMug86mIK/Um24jvus+L +CltiZALuTum5jSzguFWNsCc3btR2tywKuyauc4OH7loROUMBVn6DpwrJVSJN3OEkdyI hvHH4cZ36frySnj66jVoGQvqvx9t5/ndaAyKhqVHuFbuLtJIuZ0altajG+Ug2z4E7DHs PLFg3jFPHcRMys+r4BndvTB8UyWr/n84b1bPo4XVK7WQddNSAIolnG5n3QIIZW4OFQkN 326Q== X-Gm-Message-State: ABuFfoi+Dm4BWaxYac5uGs6M8Y4PhDjrWBDRH4PS7SEtto+/3g+7q9jI cs6ezdFAKOuX093USGDrbMB+pCXF7YY= X-Received: by 2002:a81:9148:: with SMTP id i69-v6mr14945814ywg.371.1539049211039; Mon, 08 Oct 2018 18:40:11 -0700 (PDT) Received: from mail-yw1-f44.google.com (mail-yw1-f44.google.com. [209.85.161.44]) by smtp.gmail.com with ESMTPSA id i62-v6sm9430634ywb.32.2018.10.08.18.40.09 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 08 Oct 2018 18:40:09 -0700 (PDT) Received: by mail-yw1-f44.google.com with SMTP id j75-v6so8902199ywj.10 for ; Mon, 08 Oct 2018 18:40:09 -0700 (PDT) X-Received: by 2002:a81:98cb:: with SMTP id p194-v6mr14391598ywg.353.1539049208850; Mon, 08 Oct 2018 18:40:08 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a25:d116:0:0:0:0:0 with HTTP; Mon, 8 Oct 2018 18:40:08 -0700 (PDT) In-Reply-To: References: From: Kees Cook Date: Mon, 8 Oct 2018 18:40:08 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH] security: fix LSM description location To: Randy Dunlap Cc: LKML , James Morris , "Serge E. Hallyn" , linux-security-module , "linux-doc@vger.kernel.org" Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Oct 8, 2018 at 5:46 PM, Randy Dunlap wrote: > From: Randy Dunlap > > Fix Documentation location reference for where LSM descriptions should > be placed. > > Suggested-by: Kees Cook > Signed-off-by: Randy Dunlap > Cc: James Morris > Cc: "Serge E. Hallyn" > Cc: linux-security-module@vger.kernel.org Thanks! Acked-by: Kees Cook Jon, can you take this? -Kees > --- > Documentation/security/LSM.rst | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > --- lnx-419-rc7.orig/Documentation/security/LSM.rst > +++ lnx-419-rc7/Documentation/security/LSM.rst > @@ -5,7 +5,7 @@ Linux Security Module Development > Based on https://lkml.org/lkml/2007/10/26/215, > a new LSM is accepted into the kernel when its intent (a description of > what it tries to protect against and in what cases one would expect to > -use it) has been appropriately documented in ``Documentation/security/LSM.rst``. > +use it) has been appropriately documented in ``Documentation/admin-guide/LSM/``. > This allows an LSM's code to be easily compared to its goals, and so > that end users and distros can make a more informed decision about which > LSMs suit their requirements. > > -- Kees Cook Pixel Security