linux-kernel - [PATCH] capabilities: implement per-process securebits

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 18 Feb 2008 18:25:37 -0800
From:	"Andrew G. Morgan" <morgan@...nel.org>
To:	Andrew Morton <akpm@...ux-foundation.org>
CC:	Linux Security Modules List 
	<linux-security-module@...r.kernel.org>,
	lkml <linux-kernel@...r.kernel.org>,
	"Serge E. Hallyn" <serue@...ibm.com>,
	James Morris <jmorris@...ei.org>
Subject: [PATCH] capabilities: implement per-process securebits

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrew

Here is the patch to add per-process securebits again. This version
includes Serge's argument type fix (thanks), but is otherwise unchanged
from the one posted a couple of weeks back. It is against Linus' tree as
of a the 15th.

This change is all code that lives inside the capability LSM and the new
securebits implementation is only active if
CONFIG_SECURITY_FILE_CAPABILITIES is enabled (it doesn't make much sense
to support this feature without filesystem capabilities).

As indicated in the last round, this patch has been Acked by Serge and
Reviewed by James (Cc:d).

Thanks

Andrew
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFHuj4g+bHCR3gb8jsRAjBqAKCuMrlQqIOTY+5Tba6aM5HHcy3cWQCgvA2p
v+MAuce9OULRL9vOKdivq8Q=
=L/XN
-----END PGP SIGNATURE-----

View attachment "0001-Implement-per-process-securebits.patch" of type "text/plain" (19166 bytes)