linux-kernel - Re: [PATCH v4] security: Yama LSM

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LRH.2.00.1006300854170.14620@tundra.namei.org>
Date:	Wed, 30 Jun 2010 09:18:32 +1000 (EST)
From:	James Morris <jmorris@...ei.org>
To:	Kees Cook <kees.cook@...onical.com>
cc:	linux-security-module@...r.kernel.org,
	linux-kernel@...r.kernel.org, linux-fsdevel@...r.kernel.org
Subject: Re: [PATCH v4] security: Yama LSM

On Mon, 28 Jun 2010, Kees Cook wrote:

> This adds the Yama Linux Security Module to collect several security
> features (symlink, hardlink, and PTRACE restrictions) that have existed
> in various forms over the years and have been carried outside the mainline
> kernel by other Linux distributions like Openwall and grsecurity.
> 
> Signed-off-by: Kees Cook <kees.cook@...onical.com>

There were no further complaints, and we seem to have reached a workable 
consensus on the topic.

It's not clear yet whether existing LSMs will modify their base policies 
to incorporate these protections, utilize the Yama code more directly, or 
implement some combination of both.

If you're a user of an existing LSM and want these protections, bug the 
developers for a solution :-)

Applied to
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6#next

-- 
James Morris
<jmorris@...ei.org>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/