Received: by 2002:a25:ad19:0:0:0:0:0 with SMTP id y25csp4683462ybi; Mon, 15 Jul 2019 13:00:30 -0700 (PDT) X-Google-Smtp-Source: APXvYqyY1DPSyg5VdcmY8tusNTKIyMfx67PIJgedToSiLsKmOVR3mBgd3oaTtpPRS9gjH2xVUY/7 X-Received: by 2002:a17:902:204:: with SMTP id 4mr29637392plc.178.1563220830622; Mon, 15 Jul 2019 13:00:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1563220830; cv=none; d=google.com; s=arc-20160816; b=BJesXmd+4GunpRNRLyMEZg0e2PT8qEsq3cO0yk+HFDRPiPSMauj60ZsLejgpm21mFe Xr4uqeioR6BOOycWgY4ediczXxrAeVHOfoFl2VsK1TnG8O9J2ZKtAwk/eJVOwLI56Ovt UIYYYG74uMzg/VQ+EnlUJRgYxLSdjXsZrxUuPOItfYwCj0D00qRFx66Mb06ueuwDiHup jczkeuQlIog7qh7VF82FcW10DkkOCOHZcJvjFzTUQG0+yCA8bAsKNxr1CY7qa+jNSp1E JAG3wN7qCY0REPjDjanujfsQG+qYErzHaaP2QKejnSOmNr+1xuuc4HkpV9f3XDjI7D9z k5CQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:from:subject:mime-version :message-id:date:dkim-signature; bh=OVQw66IG1TeMxfp3qBGrO0Nq5KpRlHDYY3Tp9RJoAOQ=; b=1EJ0rOw2GGfw61VVwK9BSgBNMXuaEC+2I+HZJmnsm+6icEc52PZJY1z8ewbfIaajjW JpxLeC8U+AimDOmmU48i7j225gGPrhXmD8Gu/5TOwMBIUKP7P9YqpuaHdo9YTbHmsy6c 5Ctw2UtsiYGGub633YC5W5wodbj2Sl9hZiYizDGFSsK/iaClBnLrJIU7c+uZ974KZJvi rEhCHwVSCMrWBeV9lW/VwHEaEFWG8lb1KoZjQl7hn5Qe2hclkvtpVJW7lHDXR4/lwqnT RjvCVYcf+G/dyIg+t7Vv5qcdEf4MQLbVpKTK/Z0/dWn0WfIp2Aw3lSKeM36XzrjxOMA5 V7EA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b=Z40FzhiN; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id j69si17001934pgd.589.2019.07.15.13.00.14; Mon, 15 Jul 2019 13:00:30 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b=Z40FzhiN; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1730937AbfGOT7y (ORCPT + 99 others); Mon, 15 Jul 2019 15:59:54 -0400 Received: from mail-pf1-f201.google.com ([209.85.210.201]:44410 "EHLO mail-pf1-f201.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1730692AbfGOT7x (ORCPT ); Mon, 15 Jul 2019 15:59:53 -0400 Received: by mail-pf1-f201.google.com with SMTP id j22so10830890pfe.11 for ; Mon, 15 Jul 2019 12:59:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=date:message-id:mime-version:subject:from:to:cc; bh=OVQw66IG1TeMxfp3qBGrO0Nq5KpRlHDYY3Tp9RJoAOQ=; b=Z40FzhiN7QkHIcm/x7gDZHaqhdbVO47xKXmIio3X9TEl7ZUHg90pEn4lcoqCG0D9+n mdAXwlxahi+fq0F/hSMkqYP25JZ+J/7ULdCc2Pv2E9Zm8mpBNodj9X65rUwGA50KJFKZ 8ndCz1zbYqQ1LlHxearlu6JmCtz8AC0c2NxO8Ne3yMHNTHpr5kRxQ0SytQLChXYOKbyl 7xpf/XXqa6bmJcDLZSKOHYPkH4so0+jl2lZOyrSGHRvgZzklAqXaFL+UG465c98cXhbY 7hnsthwoJm4iPXB0NbkdrrQubHduIV1aL6zKunghD6eZl69UQlg1rzqAuqQxcsuW8Cr/ IF5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:message-id:mime-version:subject:from:to:cc; bh=OVQw66IG1TeMxfp3qBGrO0Nq5KpRlHDYY3Tp9RJoAOQ=; b=DawP8RX68nOJUC7gOZrGbFu/IWTijMO4mE+O0RSQo4DEG0TekZGRAOviQ7gqBQJ0Cx 9Cy6HKTwvl3zS6odsUZZZDMaWbKcGHZdfMt2VEkftFIYOw7JtH/iQWVZ9OVX6YaMQEtv 4jW8TDl7glBwnO99tOt5e6LgoT4z7ncy8FQ5ejIPSvXfgMfJwOiibeOOtS5ld0R/Za5b Tof3F/PPYCZCuhCHP74eUatKu68CgCT0RPOMfK4uxJYk7rqeFahnqckbNHhi9mZM2VlI GYbyaaZcwifw+kM8yzoKGcxChjzH50bEzxqdfawLjr9MNsYirbH+lVykFKExIKUoobL8 HRyA== X-Gm-Message-State: APjAAAXHIlr8t6KDijknR8KnOByjrdBJd+jsWoQHr2kD4+n261HFobJQ 3HvcFygqmj09bX6HsbrSI8NeyX2flv8O21maUYjFOg== X-Received: by 2002:a65:614a:: with SMTP id o10mr28000193pgv.407.1563220792933; Mon, 15 Jul 2019 12:59:52 -0700 (PDT) Date: Mon, 15 Jul 2019 12:59:17 -0700 Message-Id: <20190715195946.223443-1-matthewgarrett@google.com> Mime-Version: 1.0 X-Mailer: git-send-email 2.22.0.510.g264f2c817a-goog Subject: [PATCH V35 00/29] Kernel lockdown functionality From: Matthew Garrett To: jmorris@namei.org Cc: linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, linux-api@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Minor updates to the previous patchset to take some review comments into account - no significant changes in functionality, other than that the eBPF patch now only disables the kernel read functions as requested.