Received: by 2002:a05:6a10:9e8c:0:0:0:0 with SMTP id y12csp261614pxx; Thu, 29 Oct 2020 01:51:16 -0700 (PDT) X-Google-Smtp-Source: ABdhPJw+PBPscm5mXLWykFbeUNCvlkQiSlchxm+qpRoVqID983vNLoi+6Dv99IQj/Nkdu8TXb85b X-Received: by 2002:a17:906:d048:: with SMTP id bo8mr3199178ejb.80.1603961476399; Thu, 29 Oct 2020 01:51:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1603961476; cv=none; d=google.com; s=arc-20160816; b=Ld6lph4ZTnITa7JP4XLxJ7zpuXr25K2PTAdAkc9aK4culLS48ieK4P+4kklgttYekh Z6YGPH+nFAd6UFdyB007ff+aFwT75Va6fOBVWHpelNrb+lHxc1EITKxx1sg4OH2bNarz eJw3TngRu+vWASsFp1QqS/cDchxsb2tPaQR3eL6+RZyXd5UF6OaOqLYTXkJpqSDZaSBX 3xodVj8fEHLa8Y8g1WLFrdKhQFwBsW/rHx8o0DStLlD90Y7iKrRaKXWWV0SrYES4aDkA X9lzws9TzaJY6S9o+z2RAnURX6YYruMQTJZMk1XEYqSLLXYs/aRgeatR4Vjy1DKZMn1+ SFgA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:mime-version:user-agent:references:message-id :in-reply-to:subject:cc:to:from:date; bh=Sq0tpjCs+eKIG2utWf3ImKw2MHafletAsDvIpYlTmFg=; b=Oo4CmYUD5+V03LDEu2v5OJiZ1H4K0dEj2tA7hr0+fe/+xxGiEEbyZJQinMed/wf5GB 0a8oyx6ALFLHxVYQwTgJPeapR6zS3Cwo1zOrA7Vvj9PlsP9Zz7KoMew0UHemfgkIGau9 Ty7t5XaDaFG5uPauSHfgu2ZwLgPruCjpZIlxh/EGEuYwR9F7CVP0BBeOkt+WfPMgK4vc eIKVydqwEDbWPumNt3HHmXADy0FYi8SOq7D0ViB1XXZVvHJT8AEcpQq8pTUIVQ/+l+hE g5WsgBVlnNPz1K0AncM3RvrtAwuUFD1g9qvMNXtoWYyc5GOXbNvjKXrPrp+X/BRTUBwi XZgw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id s16si1330678ejy.687.2020.10.29.01.50.54; Thu, 29 Oct 2020 01:51:16 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729070AbgJ2CDH (ORCPT + 99 others); Wed, 28 Oct 2020 22:03:07 -0400 Received: from namei.org ([65.99.196.166]:38520 "EHLO namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727928AbgJ1Vsr (ORCPT ); Wed, 28 Oct 2020 17:48:47 -0400 Received: from localhost (localhost [127.0.0.1]) by namei.org (8.14.4/8.14.4) with ESMTP id 09S5TZBd026933; Wed, 28 Oct 2020 05:29:35 GMT Date: Wed, 28 Oct 2020 16:29:35 +1100 (AEDT) From: James Morris To: =?ISO-8859-15?Q?Micka=EBl_Sala=FCn?= cc: "Serge E . Hallyn" , Al Viro , Andy Lutomirski , Anton Ivanov , Arnd Bergmann , Casey Schaufler , Jann Horn , Jeff Dike , Jonathan Corbet , Kees Cook , Michael Kerrisk , Richard Weinberger , Shuah Khan , Vincent Dagonneau , kernel-hardening@lists.openwall.com, linux-api@vger.kernel.org, linux-arch@vger.kernel.org, linux-doc@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-security-module@vger.kernel.org, x86@kernel.org, John Johansen , =?ISO-8859-15?Q?Micka=EBl_Sala=FCn?= , Stephen Smalley Subject: Re: [PATCH v22 05/12] LSM: Infrastructure management of the superblock In-Reply-To: <20201027200358.557003-6-mic@digikod.net> Message-ID: References: <20201027200358.557003-1-mic@digikod.net> <20201027200358.557003-6-mic@digikod.net> User-Agent: Alpine 2.21 (LRH 202 2017-01-01) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="1665246916-514386363-1603862978=:25689" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --1665246916-514386363-1603862978=:25689 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8BIT On Tue, 27 Oct 2020, Mickaël Salaün wrote: > From: Casey Schaufler > > Move management of the superblock->sb_security blob out of the > individual security modules and into the security infrastructure. > Instead of allocating the blobs from within the modules, the modules > tell the infrastructure how much space is required, and the space is > allocated there. > > Cc: Kees Cook > Cc: John Johansen > Signed-off-by: Casey Schaufler > Signed-off-by: Mickaël Salaün > Reviewed-by: Stephen Smalley It would be good to see review from JJ here. -- James Morris --1665246916-514386363-1603862978=:25689--