Linux Container Development
 help / color / mirror / Atom feed
From: "Serge E. Hallyn" <serue-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>
To: Oren Laadan <orenl-eQaUEPhvms7ENvBUuze7eA@public.gmane.org>
Cc: Linux Containers <containers-qjLDD68F18O7TbgM5vRIOg@public.gmane.org>
Subject: [PATCH 0/3] cr: support LSM credentials
Date: Wed, 12 Aug 2009 13:12:37 -0500	[thread overview]
Message-ID: <20090812181237.GA10925@us.ibm.com> (raw)

Here is my current code for lsm c/r support.  I'll be out a good
part of next week, but intend to spend the next few weeks doing
proper selinux implementation, working on the comments for these
earlier patches, and writing some automated tests.  These patches
seem solid on my setup, and shouldn't hurt anything to have in
the tree for testing.  I'm punting on the SELinux code this week
bc testing it requires a lot more userspace tweaking to properly
test.  That means that if you have an SELinux-enabled kernel, you
will be able to use mktree without -k as usual to get default
labeling, but mktree -k < out will return -ENOSYS.

I'm not sending to linux-kernel-module or selinux lists because
that will require writing patch intros describing c/r again
etc...

-serge

             reply	other threads:[~2009-08-12 18:12 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-08-12 18:12 Serge E. Hallyn [this message]
     [not found] ` <20090812181237.GA10925-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>
2009-08-12 18:14   ` [PATCH 1/3] cr: checkpoint the active LSM and add RESTART_KEEP_LSM flag Serge E. Hallyn
2009-08-12 18:14   ` [PATCH 2/3] cr: add generic LSM c/r support Serge E. Hallyn
2009-08-12 18:14   ` [PATCH 3/3] cr: add smack support to lsm c/r Serge E. Hallyn

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20090812181237.GA10925@us.ibm.com \
    --to=serue-r/jw6+rmf7hqt0dzr+alfa@public.gmane.org \
    --cc=containers-qjLDD68F18O7TbgM5vRIOg@public.gmane.org \
    --cc=orenl-eQaUEPhvms7ENvBUuze7eA@public.gmane.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox