[kernel-hardening] link & FIFO hardening

[kernel-hardening] link & FIFO hardening

[Solar Designer]

Vasiliy, Kees -

Vasiliy - in your "overview of grsecurity and -ow patches":

http://www.openwall.com/lists/owl-dev/2011/04/23/1

you wrote:

> GRKERNSEC_LINK [+]
> GRKERNSEC_FIFO [+]
> GRKERNSEC_HARDEN_PTRACE [+]
> 
>     There is YAMA LSM for mainline, implementing these features.  It is not
>     yet applied, but Kees Cook does his best to push it.  For RHEL6/OpenVZ
>     YAMA should be OK (with Ubuntu's forcing scheme), with minor
>     synchorization changes.

What's the status on this (for mainline)?  I regard the link (both
symlink and hard link) and FIFO restrictions as a priority, compared to
some other things we'll be working on.  (In general, I want us to have a
full set of whatever was in 2.4.x-ow merged sooner rather than later.)

Thanks,

Alexander