From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.3 required=3.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_IN_DEF_DKIM_WL autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id ADFD5C43381 for ; Thu, 14 Jan 2021 03:24:07 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 77759236F9 for ; Thu, 14 Jan 2021 03:24:07 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728160AbhANDYB (ORCPT ); Wed, 13 Jan 2021 22:24:01 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:34884 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727155AbhANDX6 (ORCPT ); Wed, 13 Jan 2021 22:23:58 -0500 Received: from mail-lj1-x231.google.com (mail-lj1-x231.google.com [IPv6:2a00:1450:4864:20::231]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 34434C0617A2 for ; Wed, 13 Jan 2021 19:23:18 -0800 (PST) Received: by mail-lj1-x231.google.com with SMTP id u11so4890715ljo.13 for ; Wed, 13 Jan 2021 19:23:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=FEfB7z2Pg3tEbsUuKrEZpLqRqQiSI7cwvfIpRmMaPsg=; b=ERDheW9rkL9QnlcBk+gjMEWNicKOrODmm03n00UhTyuOanz3yIf+tVQ2IhyWO8CwON GKpMHZiqMwxQyAHoTp5gWGJ9T/9Cv+QqTqzD/Q0j7l6WJ3FK2LOR2lYJleXMUi/HaPtq hAo0tLKKn2Q7t/UBKM4+ZCJT32+rgjpcSTro39e8R9WGksf2PWbqS4pLDiAzVnHdQwFS cKqbNI76NaFU69m3LsyPmjdP3CzRq2oPRT9ho+fOAmBKu1eGIxoQiB5laGLfmKCFbLTh A+1wPcGioLznXyUUcakh1ovdoJ4a55uHhp/zcRprrvdM7164eLO9rwAW7zpziuw26kme wiUQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=FEfB7z2Pg3tEbsUuKrEZpLqRqQiSI7cwvfIpRmMaPsg=; b=X9L850Arv1WUEj9TzdM9W5sjrU3qlNxozsAV9zcyZpqlMZHCOKhwu4ybp3RccFEqMn xUyR1LUt0YtdZ4S1Qs84DiEOcy+30tjbySVfLkf3+vKyoYfQWTVNLzErQsL2cptLwOAe UDVG6tggKi2w1ABrnnhRkdEC527Mt9cirKX4L2dFc9GEcX+U462MfVOMGOX5GaY0st88 5lb4PbvIw8AzGXvi70J5Ge70Cz56QzyGR7Tc+GnejGca7yifmH0G+Cw2DkUz8nM5I/Cp 28wQTkFZyg/OhDpehDdCuWqRpds/Gc8bNXf5NZ26Mq1gqOWT4/WQglZHMUePGBRPwFbf OgJA== X-Gm-Message-State: AOAM531XtbYg7uLZ18I25HQSi8w8Fd2fSq8cIgDArMg08wS8meBDiPkQ YE+FpElwbUeRCSdbzOVW4a39ckvkqJeJK2HGgNBL9w== X-Google-Smtp-Source: ABdhPJzfRhrd1kMrfF3j3pfT5UxcaTNs6jz7zJ40MKXw+hJC73ejwL+h4IUubxMUXNGPVLdYIr3TdisY3PE9ZGevcmg= X-Received: by 2002:a2e:593:: with SMTP id 141mr2267937ljf.86.1610594596352; Wed, 13 Jan 2021 19:23:16 -0800 (PST) MIME-Version: 1.0 References: <20201209192839.1396820-1-mic@digikod.net> In-Reply-To: <20201209192839.1396820-1-mic@digikod.net> From: Jann Horn Date: Thu, 14 Jan 2021 04:22:50 +0100 Message-ID: Subject: Re: [PATCH v26 00/12] Landlock LSM To: =?UTF-8?B?TWlja2HDq2wgU2FsYcO8bg==?= Cc: James Morris , "Serge E . Hallyn" , Al Viro , Andy Lutomirski , Anton Ivanov , Arnd Bergmann , Casey Schaufler , Jeff Dike , Jonathan Corbet , Kees Cook , Michael Kerrisk , Richard Weinberger , Shuah Khan , Vincent Dagonneau , Kernel Hardening , Linux API , linux-arch , "open list:DOCUMENTATION" , linux-fsdevel , kernel list , "open list:KERNEL SELFTEST FRAMEWORK" , linux-security-module , "the arch/x86 maintainers" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Dec 9, 2020 at 8:28 PM Micka=C3=ABl Sala=C3=BCn w= rote: > This patch series adds new built-time checks, a new test, renames some > variables and functions to improve readability, and shift syscall > numbers to align with -next. Sorry, I've finally gotten around to looking at v26 - I hadn't actually looked at v25 either yet. I think there's still one remaining small issue in the filesystem access logic, but I think that's very simple to fix, as long as we agree on what the expected semantics are. Otherwise it basically looks good, apart from some typos. I think v27 will be the final version of this series. :) (And I'll try to actually look at that version much faster - I realize that waiting for code reviews this long sucks.)