From: ebiederm@xmission.com (Eric W. Biederman)
To: <linux-security-module@vger.kernel.org>
Cc: <linux-kernel@vger.kernel.org>,
Linux Containers <containers@lists.linux-foundation.org>,
"Serge E. Hallyn" <serge@hallyn.com>
Subject: [REVIEW][PATCH 00/14] userns: Miscelanous conversions
Date: Thu, 20 Sep 2012 17:26:52 -0700 [thread overview]
Message-ID: <87k3vote43.fsf@xmission.com> (raw)
The following patchset contains conversion for basic user namespace
support for the security modules and a few miscelaneous other things.
I am placing these patches up for review before I add them to
linux-next.
Please holler if it looks if you see something scary.
The following patchset is against
git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace.git for-next
which is based on v3.6-rc1
Eric
Eric W. Biederman (14):
userns: Convert loop to use kuid_t instead of uid_t
userns: Convert apparmor to use kuid and kgid where appropriate
userns: Convert tomoyo to use kuid and kgid where appropriate
userns: Convert selinux to use kuid and kgid where appropriate
userns: Convert hostfs to use kuid and kgid where appropriate
userns: Convert EVM to deal with kuids and kgids in it's hmac computation
userns: Add user namespace support to IMA
userns: Teach security_path_chown to take kuids and kgids
userns: Convert binder ipc to use kuids
userns: Convert s390 hypfs to use kuid and kgid where appropriate
userns: Convert s390 getting uid and gid system calls to use kuid and kgid
userns: On ppc convert current_uid from a kuid before printing.
userns: On ia64 deal with current_uid and current_gid being kuid and kgid
userns: On alpha modify linux_to_osf_stat to use convert from kuids and kgids
arch/alpha/kernel/osf_sys.c | 4 +-
arch/ia64/kernel/mca_drv.c | 3 +-
arch/ia64/kernel/perfmon.c | 32 +++++++++++++++---------------
arch/ia64/kernel/signal.c | 4 +-
arch/powerpc/mm/fault.c | 2 +-
arch/s390/hypfs/inode.c | 20 +++++++++++++-----
arch/s390/kernel/compat_linux.c | 36 +++++++++++++++++++++++-----------
drivers/block/loop.c | 4 +-
drivers/staging/android/binder.c | 14 ++++++------
fs/hostfs/hostfs_kern.c | 8 +++---
fs/open.c | 2 +-
include/linux/loop.h | 2 +-
include/linux/security.h | 6 ++--
init/Kconfig | 15 --------------
security/apparmor/domain.c | 4 +-
security/apparmor/file.c | 12 ++++++----
security/apparmor/include/audit.h | 2 +-
security/apparmor/include/file.h | 4 +-
security/apparmor/lsm.c | 2 +-
security/capability.c | 2 +-
security/integrity/evm/evm_crypto.c | 4 +-
security/integrity/ima/ima_audit.c | 5 ++-
security/integrity/ima/ima_policy.c | 14 ++++++------
security/security.c | 2 +-
security/selinux/selinuxfs.c | 6 ++--
security/selinux/ss/services.c | 2 +-
security/tomoyo/audit.c | 23 +++++++++++++++------
security/tomoyo/common.c | 4 ++-
security/tomoyo/common.h | 4 +-
security/tomoyo/condition.c | 20 +++++++++---------
security/tomoyo/tomoyo.c | 12 ++++++----
31 files changed, 148 insertions(+), 126 deletions(-)
next reply other threads:[~2012-09-21 0:27 UTC|newest]
Thread overview: 58+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-09-21 0:26 Eric W. Biederman [this message]
[not found] ` <87k3vote43.fsf-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-21 0:28 ` [PATCH 01/14] userns: Convert loop to use kuid_t instead of uid_t Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
[not found] ` <1348187330-6616-1-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-21 0:28 ` [PATCH 02/14] userns: Convert apparmor to use kuid and kgid where appropriate Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-21 0:28 ` [PATCH 03/14] userns: Convert tomoyo " Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-21 0:28 ` [PATCH 04/14] userns: Convert selinux " Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
[not found] ` <1348187330-6616-4-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-26 17:51 ` Serge Hallyn
2012-09-26 17:51 ` Serge Hallyn
2012-09-21 0:28 ` [PATCH 05/14] userns: Convert hostfs " Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-23 21:59 ` Richard Weinberger
2012-09-24 2:39 ` Eric W. Biederman
[not found] ` <505F864C.2000103-/L3Ra7n9ekc@public.gmane.org>
2012-09-24 2:39 ` Eric W. Biederman
2012-09-24 14:55 ` Serge Hallyn
2012-09-24 14:55 ` Serge Hallyn
[not found] ` <1348187330-6616-5-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-23 21:59 ` Richard Weinberger
2012-09-21 0:28 ` [PATCH 06/14] userns: Convert EVM to deal with kuids and kgids in it's hmac computation Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-21 0:28 ` [PATCH 07/14] userns: Add user namespace support to IMA Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-21 0:28 ` [PATCH 08/14] userns: Teach security_path_chown to take kuids and kgids Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-21 0:28 ` [PATCH 09/14] userns: Convert binder ipc to use kuids Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
[not found] ` <1348187330-6616-9-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-21 6:44 ` Greg Kroah-Hartman
2012-09-21 6:44 ` Greg Kroah-Hartman
2012-09-21 0:28 ` [PATCH 10/14] userns: Convert s390 hypfs to use kuid and kgid where appropriate Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-26 17:52 ` Serge Hallyn
[not found] ` <1348187330-6616-10-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-26 17:52 ` Serge Hallyn
2012-09-21 0:28 ` [PATCH 11/14] userns: Convert s390 getting uid and gid system calls to use kuid and kgid Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-26 17:59 ` Serge Hallyn
[not found] ` <1348187330-6616-11-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-26 17:59 ` Serge Hallyn
2012-09-21 0:28 ` [PATCH 12/14] userns: On ppc convert current_uid from a kuid before printing Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
[not found] ` <1348187330-6616-12-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-26 17:56 ` Serge Hallyn
2012-09-26 17:56 ` Serge Hallyn
2012-09-21 0:28 ` [PATCH 13/14] userns: On ia64 deal with current_uid and current_gid being kuid and kgid Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
[not found] ` <1348187330-6616-13-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-25 9:15 ` Zhao Hongjiang
[not found] ` <50617630.1050709-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
2012-09-25 9:58 ` Eric W. Biederman
2012-09-26 17:55 ` Serge Hallyn
2012-09-26 17:55 ` Serge Hallyn
2012-09-21 0:28 ` [PATCH 14/14] userns: On alpha modify linux_to_osf_stat to use convert from kuids and kgids Eric W. Biederman
2012-09-21 0:28 ` Eric W. Biederman
2012-09-21 6:07 ` [PATCH 01/14] userns: Convert loop to use kuid_t instead of uid_t Jens Axboe
2012-09-21 6:07 ` Jens Axboe
[not found] ` <505C0438.9060907-5c4llco8/ftWk0Htik3J/w@public.gmane.org>
2012-09-21 7:07 ` Eric W. Biederman
2012-09-21 7:07 ` Eric W. Biederman
[not found] ` <87sjabsvkx.fsf-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
2012-09-21 7:11 ` Jens Axboe
2012-09-21 7:11 ` Jens Axboe
[not found] ` <505C1331.8050907-5c4llco8/ftWk0Htik3J/w@public.gmane.org>
2012-09-21 7:19 ` Eric W. Biederman
2012-09-21 7:19 ` Eric W. Biederman
-- strict thread matches above, loose matches on Subject: below --
2012-09-21 0:26 [REVIEW][PATCH 00/14] userns: Miscelanous conversions Eric W. Biederman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87k3vote43.fsf@xmission.com \
--to=ebiederm@xmission.com \
--cc=containers@lists.linux-foundation.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=serge@hallyn.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.