All of lore.kernel.org
 help / color / mirror / Atom feed
From: Kees Cook <keescook@chromium.org>
To: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Cc: Paul Moore <paul@paul-moore.com>,
	Casey Schaufler <casey@schaufler-ca.com>,
	Kees Cook <kees@kernel.org>,
	linux-security-module@vger.kernel.org,
	Linus Torvalds <torvalds@linux-foundation.org>
Subject: Re: ANN: new LSM guidelines
Date: Sun, 24 Sep 2023 18:32:08 -0700	[thread overview]
Message-ID: <202309241827.6818149EC8@keescook> (raw)
In-Reply-To: <8912fc96-cb8e-ec3b-273d-6bd8ad6b5513@I-love.SAKURA.ne.jp>

On Mon, Sep 25, 2023 at 09:55:47AM +0900, Tetsuo Handa wrote:
> On 2023/09/13 4:00, Paul Moore wrote:
> > On Tue, Sep 12, 2023 at 2:40 PM Casey Schaufler <casey@schaufler-ca.com> wrote:
> >> On 9/12/2023 11:08 AM, Paul Moore wrote:
> >>>
> >>> Once again, we've already discussed this many, many times: out-of-tree
> >>> LSMs are not the priority and that is not going to change.  One
> >>> corollary of this is that we are not going to assign LSM IDs to LSMs
> >>> that remain out-of-tree as this would negatively impact the LSM layer
> >>> by cluttering/depleting the LSM ID space.
> 
> Like Kees Cook said, we don't need to worry about depleting the LSM ID space
> because lsm_id::id is a u64. We only need to worry about cluttering/conflicting
> the values.

Right, this will go one of two ways:

1) author: "Hello, here is a new LSM I'd like to upstream, here it is. I assigned
            it the next LSM ID."
   maintainer(s): "Okay, sounds good. *review*"

2) author: "Hello, here is an LSM that has been in active use at $Place,
            and we have $Xxx many userspace applications that we cannot easily
            rebuild. We used LSM ID $Value that is far away from the sequential
            list of LSM IDs, and we'd really prefer to keep that assignment."
  maintainer(s): "Okay, sounds good. *review*"

No problems detected.

-Kees

-- 
Kees Cook

  reply	other threads:[~2023-09-25  1:32 UTC|newest]

Thread overview: 33+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-07-06 20:42 ANN: new LSM guidelines Paul Moore
2023-07-07  0:32 ` Casey Schaufler
2023-07-07 22:02   ` Paul Moore
2023-08-01 22:47     ` Paul Moore
2023-08-02 18:38       ` Mickaël Salaün
2023-08-02 21:56         ` Paul Moore
2023-08-02 22:36           ` Randy Dunlap
2023-08-03 20:55             ` Paul Moore
2023-08-03  9:44           ` Mickaël Salaün
2023-08-03 21:36             ` Paul Moore
2023-08-02 22:00       ` Paul Moore
2023-08-03  9:44         ` Mickaël Salaün
2023-08-03 21:24           ` Paul Moore
2023-08-03 21:38         ` Paul Moore
2023-08-04  7:58           ` Mickaël Salaün
2023-08-07 21:52             ` Paul Moore
2023-09-07 22:12           ` Paul Moore
2023-09-08 16:02             ` Casey Schaufler
2023-09-08 17:29               ` Paul Moore
2023-09-08 20:53                 ` Casey Schaufler
2023-09-09  0:46         ` Tetsuo Handa
2023-09-11 13:03           ` Serge E. Hallyn
2023-09-11 20:04           ` Paul Moore
2023-09-12  1:29             ` Tetsuo Handa
2023-09-12 18:08               ` Paul Moore
2023-09-12 18:39                 ` Casey Schaufler
2023-09-12 19:00                   ` Paul Moore
2023-09-12 19:03                     ` Paul Moore
2023-09-25  0:55                     ` Tetsuo Handa
2023-09-25  1:32                       ` Kees Cook [this message]
2023-09-25  4:32                         ` Tetsuo Handa
2023-09-26 21:23                           ` Paul Moore
2023-09-15 11:29                 ` Tetsuo Handa

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=202309241827.6818149EC8@keescook \
    --to=keescook@chromium.org \
    --cc=casey@schaufler-ca.com \
    --cc=kees@kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=paul@paul-moore.com \
    --cc=penguin-kernel@i-love.sakura.ne.jp \
    --cc=torvalds@linux-foundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.