Received: by 2002:a25:683:0:0:0:0:0 with SMTP id 125csp1001259ybg; Wed, 3 Jun 2020 21:00:27 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwpNG7CywDPWM7d5s+AD0ZVrvukRGonzYBVye+W9QlKwHg33yJssSJL4e8ZZTas9xqUIvh2 X-Received: by 2002:a05:6402:362:: with SMTP id s2mr2497195edw.337.1591243227216; Wed, 03 Jun 2020 21:00:27 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1591243227; cv=none; d=google.com; s=arc-20160816; b=jL4e4odLzC0i6/paJgkqNOEJq44EfAPzDkyiuQzKNtkMQjwU/ITwjtPuPAc7vcFBOk oTsIWWULEMSKxQjZYmbB+r5/xgbDO3LpN93KIx1X09sTI+QkzWfeHt+A1bzSc/vTVvCL Umvb9PGSyPAycp2Sm7m1MTq+9kWTsgo+KPSWYTsx0INKm6hAs4H2ssCEKNlgAF7huYZU BHbwjFz9HbxSz5UciT4ZikE9ptvnMJAMlU/1TaEFn1ufI1i58VjUYMqEGZfGpkJZv3TN ZH5ch7+AjpbVcn7LKNgT7RD4Qpx5wLir/mr3Hn4USlbz41R6v2kWMvuwuwIkUeIxBe9E gWSA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:user-agent:references :message-id:in-reply-to:subject:cc:to:from:date; bh=0FMko1QxkxU0euI/L8Tfar9nvbEme0/WFisC16SL6gY=; b=FCM8ursiZscgRjs9//+Yd4rNOnNxwl2GLGwKnt1gjFiMlh4Zd3HFvXoA7xeWhOpJyL EgVKCfF5XmHSl3CyT+0dTmUJ/zM3LhuDjBr5h7spx/WdXNFsCwoefaPaNDQnDAFHl4WD pumWVqWi5PDn3jRMGxbsqzHYD3TwTVjDkgXNn9bDsx8qgJdhekrHjs4Y9rlbArb37/r1 trbOBoYDw2DPm8VEy0cxFILe+70f/RToN+wXtyFj/MQHsvDKQPgVFCcxTHB8OSh31g/C PhAUQC6YZeGs4ebEosPOGqseAjmYRQKt2vrnW1OW1CNkj8jVWWCym2Nia8au3Je7WHMp wpmw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id d6si993276edo.493.2020.06.03.21.00.02; Wed, 03 Jun 2020 21:00:27 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727061AbgFDD4m (ORCPT + 99 others); Wed, 3 Jun 2020 23:56:42 -0400 Received: from namei.org ([65.99.196.166]:40880 "EHLO namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725936AbgFDD4m (ORCPT ); Wed, 3 Jun 2020 23:56:42 -0400 Received: from localhost (localhost [127.0.0.1]) by namei.org (8.14.4/8.14.4) with ESMTP id 0543uU8b003176; Thu, 4 Jun 2020 03:56:30 GMT Date: Thu, 4 Jun 2020 13:56:30 +1000 (AEST) From: James Morris To: Daniel Colascione cc: timmurray@google.com, selinux@vger.kernel.org, linux-security-module@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, kvm@vger.kernel.org, viro@zeniv.linux.org.uk, Paul Moore , nnk@google.com, Stephen Smalley , lokeshgidra@google.com, Andrew Morton Subject: Re: [PATCH v5 0/3] SELinux support for anonymous inodes and UFFD In-Reply-To: <20200401213903.182112-1-dancol@google.com> Message-ID: References: <20200326200634.222009-1-dancol@google.com> <20200401213903.182112-1-dancol@google.com> User-Agent: Alpine 2.21 (LRH 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, 1 Apr 2020, Daniel Colascione wrote: > Daniel Colascione (3): > Add a new LSM-supporting anonymous inode interface > Teach SELinux about anonymous inodes > Wire UFFD up to SELinux > > fs/anon_inodes.c | 191 ++++++++++++++++++++++------ > fs/userfaultfd.c | 30 ++++- > include/linux/anon_inodes.h | 13 ++ > include/linux/lsm_hooks.h | 11 ++ > include/linux/security.h | 3 + > security/security.c | 9 ++ > security/selinux/hooks.c | 53 ++++++++ > security/selinux/include/classmap.h | 2 + > 8 files changed, 267 insertions(+), 45 deletions(-) Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git secure_uffd_v5.9 and next-testing. This will provide test coverage in linux-next, as we aim to get this upstream for v5.9. I had to make some minor fixups, please review. -- James Morris