mbox

[Oneiric,pull,request] Update/consolidate Yama

Message ID 20110513002205.GU28888@outflux.net
State New
Headers show

Pull-request

git://kernel.ubuntu.com/kees/ubuntu-oneiric.git master

Message

Kees Cook May 13, 2011, 12:22 a.m. UTC 
The following changes since commit 0c01e3fb2b287e9558fbdaefa7b42cf02568cbd1:

  UBUNTU: Ubuntu-2.6.39-2.7 (2011-05-10 11:16:01 +0200)

are available in the git repository at:
  git://kernel.ubuntu.com/kees/ubuntu-oneiric.git master

Kees Cook (15):
      Revert "Yama: fix default relationship to check thread group"
      Revert "Yama: use thread group leader when creating match"
      Revert "UBUNTU: SAUCE: Yama: follow changes to generic_permission"
      Revert "UBUNTU: SAUCE: Yama: verify inode is symlink to avoid bind mounts"
      Revert "UBUNTU: SAUCE: Yama: search for PTRACE exceptions via thread group leader"
      Revert "UBUNTU: SAUCE: Yama: check PTRACE using thread group leader"
      Revert "UBUNTU: SAUCE: security: unconditionally chain to Yama LSM"
      Revert "UBUNTU: SAUCE: Yama: add PTRACE exception tracking and interface"
      Revert "UBUNTU: SAUCE: fix compilation warning when CONFIG_SECURITY is not set" 
      Revert "UBUNTU: SAUCE: security: create task_free security callback"
      Revert "UBUNTU: [Upstream] security: Yama LSM"
      UBUNTU: ubuntu: Yama - LSM hooks
      UBUNTU: ubuntu: Yama - create task_free security callback
      UBUNTU: ubuntu: Yama - add ptrace relationship tracking interface
      UBUNTU: ubuntu: Yama - unconditionally chain to Yama LSM

 Documentation/Yama.txt   |   38 +++++++++++++++++++++++++-------------
 security/yama/yama_lsm.c |   19 +++++++++++--------
 2 files changed, 36 insertions(+), 21 deletions(-)

(The above delta between reverts and commits are documentation clean-ups
and a minor bug fix in ptrace relationship clearing.)

Thanks!

-Kees

Comments

Tim Gardner May 16, 2011, 4:05 p.m. UTC | #1 
On 05/12/2011 06:22 PM, Kees Cook wrote:
> The following changes since commit 0c01e3fb2b287e9558fbdaefa7b42cf02568cbd1:
>
>    UBUNTU: Ubuntu-2.6.39-2.7 (2011-05-10 11:16:01 +0200)
>
> are available in the git repository at:
>    git://kernel.ubuntu.com/kees/ubuntu-oneiric.git master
>
> Kees Cook (15):
>        Revert "Yama: fix default relationship to check thread group"
>        Revert "Yama: use thread group leader when creating match"
>        Revert "UBUNTU: SAUCE: Yama: follow changes to generic_permission"
>        Revert "UBUNTU: SAUCE: Yama: verify inode is symlink to avoid bind mounts"
>        Revert "UBUNTU: SAUCE: Yama: search for PTRACE exceptions via thread group leader"
>        Revert "UBUNTU: SAUCE: Yama: check PTRACE using thread group leader"
>        Revert "UBUNTU: SAUCE: security: unconditionally chain to Yama LSM"
>        Revert "UBUNTU: SAUCE: Yama: add PTRACE exception tracking and interface"
>        Revert "UBUNTU: SAUCE: fix compilation warning when CONFIG_SECURITY is not set"
>        Revert "UBUNTU: SAUCE: security: create task_free security callback"
>        Revert "UBUNTU: [Upstream] security: Yama LSM"
>        UBUNTU: ubuntu: Yama - LSM hooks
>        UBUNTU: ubuntu: Yama - create task_free security callback
>        UBUNTU: ubuntu: Yama - add ptrace relationship tracking interface
>        UBUNTU: ubuntu: Yama - unconditionally chain to Yama LSM
>
>   Documentation/Yama.txt   |   38 +++++++++++++++++++++++++-------------
>   security/yama/yama_lsm.c |   19 +++++++++++--------
>   2 files changed, 36 insertions(+), 21 deletions(-)
>
> (The above delta between reverts and commits are documentation clean-ups
> and a minor bug fix in ptrace relationship clearing.)
>
> Thanks!
>
> -Kees
>

I rebased and simply dropped all of the existing Yama patches before 
applying 'UBUNTU: ubuntu: Yama - LSM hooks' et all

rtg