Linus Torvalds 17ae69aba8
Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security ...
Pull Landlock LSM from James Morris:
"Add Landlock, a new LSM from Mickaël Salaün.
Briefly, Landlock provides for unprivileged application sandboxing.
From Mickaël's cover letter:
"The goal of Landlock is to enable to restrict ambient rights (e.g.
global filesystem access) for a set of processes. Because Landlock
is a stackable LSM [1], it makes possible to create safe security
sandboxes as new security layers in addition to the existing
system-wide access-controls. This kind of sandbox is expected to
help mitigate the security impact of bugs or unexpected/malicious
behaviors in user-space applications. Landlock empowers any
process, including unprivileged ones, to securely restrict
themselves.
Landlock is inspired by seccomp-bpf but instead of filtering
syscalls and their raw arguments, a Landlock rule can restrict the
use of kernel objects like file hierarchies, according to the
kernel semantic. Landlock also takes inspiration from other OS
sandbox mechanisms: XNU Sandbox, FreeBSD Capsicum or OpenBSD
Pledge/Unveil.
In this current form, Landlock misses some access-control features.
This enables to minimize this patch series and ease review. This
series still addresses multiple use cases, especially with the
combined use of seccomp-bpf: applications with built-in sandboxing,
init systems, security sandbox tools and security-oriented APIs [2]"
The cover letter and v34 posting is here:
https://lore.kernel.org/linux-security-module/20210422154123.13086-1-mic@digikod.net/
See also:
https://landlock.io/
This code has had extensive design discussion and review over several
years"
Link: https://lore.kernel.org/lkml/50db058a-7dde-441b-a7f9-f6837fe8b69f@schaufler-ca.com/ [1]
Link: https://lore.kernel.org/lkml/f646e1c7-33cf-333f-070c-0a40ad0468cd@digikod.net/ [2]
* tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:
landlock: Enable user space to infer supported features
landlock: Add user and kernel documentation
samples/landlock: Add a sandbox manager example
selftests/landlock: Add user space tests
landlock: Add syscall implementations
arch: Wire up Landlock syscalls
fs,security: Add sb_delete hook
landlock: Support filesystem access-control
LSM: Infrastructure management of the superblock
landlock: Add ptrace restrictions
landlock: Set up the security framework and manage credentials
landlock: Add ruleset and domain management
landlock: Add object management
2021-05-01 18:50:44 -07:00
2021-04-26 16:32:11 -07:00
2021-04-22 09:26:22 -07:00
2021-03-30 11:14:45 +02:00
2021-03-24 14:01:58 +01:00
2021-04-27 14:10:15 -07:00
2021-04-30 13:04:30 -07:00
2021-04-06 15:33:32 -05:00
2021-04-30 13:04:30 -07:00
2021-04-07 08:36:38 +01:00
2021-04-26 12:30:36 -07:00
2021-04-28 15:59:13 -07:00
2021-05-01 09:15:05 -07:00
2021-04-23 09:29:49 +02:00
2021-04-16 20:30:54 +02:00
2021-04-26 18:16:56 +02:00
2021-04-26 18:16:56 +02:00
2021-04-26 03:20:07 +02:00
2021-04-26 18:16:56 +02:00
2021-04-26 18:16:56 +02:00
2021-04-22 02:03:01 +02:00
2021-04-30 12:48:14 -07:00
2021-03-21 21:29:26 +01:00
2021-04-08 13:26:22 -07:00
2021-04-23 13:18:35 +01:00
2021-01-23 14:57:21 +01:00
2021-04-29 11:06:13 -07:00
2021-03-29 22:49:54 -05:00
2021-04-06 10:22:02 +05:30
2021-04-28 15:56:51 -07:00
2021-03-31 15:57:48 -04:00
2021-03-08 11:33:28 +01:00
2021-04-29 11:57:23 -07:00
2021-04-26 17:04:27 +02:00
2020-01-24 21:03:53 +01:00
2021-04-07 11:14:55 +02:00
2021-01-14 17:31:05 -05:00
2021-03-22 08:55:28 +05:30
2021-04-07 16:33:20 +01:00
2021-04-09 14:54:23 -07:00
2021-04-14 16:30:30 +03:00
2021-04-12 09:19:58 -06:00
2021-04-28 14:39:37 -07:00
2021-04-13 18:18:57 -07:00
2021-04-03 01:43:49 +02:00
2021-04-29 11:57:23 -07:00
2021-02-16 15:23:23 -08:00
2021-03-26 20:41:51 -07:00
2021-04-15 17:04:24 +01:00
2020-10-25 14:51:49 -07:00
2021-01-24 14:27:17 +01:00
2021-04-08 16:04:20 -07:00
2021-04-04 13:34:46 -04:00
2017-11-02 11:10:55 +01:00
2021-04-07 11:05:44 -07:00
2019-06-19 17:09:55 +02:00
2021-04-07 16:33:20 +01:00
2021-05-01 10:14:08 -07:00
2020-12-15 12:13:45 -08:00
2021-04-30 12:22:28 -07:00
2021-04-08 16:04:20 -07:00
2021-04-08 16:04:20 -07:00
2021-04-30 11:20:35 -07:00
2021-04-25 05:26:10 +09:00
2021-01-08 11:02:18 -08:00
2020-03-21 15:23:53 +01:00
2020-11-19 11:25:42 +01:00
2021-04-06 16:05:38 -06:00
2019-05-24 17:27:11 +02:00
2019-04-25 21:33:37 +02:00
2021-03-10 09:16:09 +01:00
2021-05-01 09:33:00 -07:00
2021-04-07 19:26:44 +02:00
2021-04-29 11:41:43 -07:00
2021-03-22 15:23:32 -04:00
2020-09-15 13:51:08 +02:00
2021-04-16 17:06:34 +02:00
2019-06-05 17:37:05 +02:00
2021-03-09 15:40:16 +09:00
2021-04-19 13:13:26 -04:00
2021-03-23 14:58:10 +01:00
2021-04-22 08:20:15 +02:00
2021-04-08 12:21:13 +02:00
2021-04-07 10:30:47 +02:00
2021-02-24 09:54:24 -08:00
2021-03-19 07:44:28 +01:00
2017-11-02 11:10:55 +01:00
2021-04-25 05:25:42 +09:00
2021-03-22 03:57:39 +01:00
2021-04-16 16:59:20 -07:00
2021-02-08 12:28:07 +01:00
2019-10-17 16:44:36 +02:00
2020-01-03 09:42:52 +01:00
2020-12-10 12:42:59 -06:00
2021-04-12 15:04:23 +02:00
2021-03-30 22:37:06 +02:00
2019-07-26 14:51:57 +10:00
2019-06-05 17:36:37 +02:00
2021-01-16 18:14:53 +00:00
2021-04-08 19:12:20 +02:00
2020-07-29 16:14:27 +02:00
2021-04-30 11:20:36 -07:00
2021-04-23 10:14:32 +01:00
2021-04-23 10:14:32 +01:00
2020-04-18 15:44:54 -05:00
2021-04-08 10:24:36 -06:00
2021-04-30 11:20:43 -07:00
2020-07-20 17:00:02 -07:00
2021-03-11 20:47:09 +00:00
2021-04-29 21:44:07 +02:00
2019-06-05 17:36:38 +02:00
2021-03-31 17:42:14 +02:00
2020-11-16 15:20:01 +01:00
2021-03-25 09:22:55 -07:00
2021-04-28 17:22:10 -07:00
2021-04-10 21:59:21 +02:00
2020-11-16 08:14:30 -07:00
2021-04-19 12:50:15 +02:00
2021-03-23 14:49:05 -07:00
2019-05-30 11:26:32 -07:00
2021-04-08 16:04:20 -07:00
2020-12-02 22:10:35 -08:00
2021-04-08 19:09:02 +02:00
2021-04-07 11:55:47 +02:00
2021-04-07 10:15:19 +02:00
2021-04-11 19:30:41 -06:00
2021-04-30 11:20:39 -07:00
2021-04-07 10:56:53 +02:00
2021-04-30 11:20:40 -07:00
2021-04-16 17:20:45 +02:00
2021-04-26 15:03:23 -07:00
2021-04-07 10:30:47 +02:00
2020-11-24 16:47:48 +01:00
2021-04-26 10:25:03 -07:00
2021-03-22 04:23:14 +01:00
2021-04-22 15:55:22 +01:00
2021-01-22 11:08:56 +01:00
2017-11-02 11:10:55 +01:00
2021-04-05 22:39:38 -04:00
2021-04-08 14:05:19 +02:00
2021-04-30 11:20:41 -07:00
2021-02-17 14:12:42 +01:00
2017-11-02 11:10:55 +01:00
2020-07-23 10:33:12 +02:00
2019-06-05 17:37:16 +02:00
2021-01-22 15:09:42 +01:00
2021-04-21 12:20:03 -04:00
2020-09-02 11:31:23 -06:00
2019-11-26 13:35:25 -07:00
2021-04-13 09:16:12 -06:00
2021-04-08 16:04:22 -07:00
2021-01-14 11:20:17 +01:00
2021-04-28 12:37:53 -07:00
2017-11-02 11:10:55 +01:00
2021-05-01 18:50:44 -07:00
2021-05-01 18:50:44 -07:00
2021-04-20 16:27:54 -07:00
2020-12-15 22:46:15 -08:00
2021-04-12 10:36:00 -06:00
2021-04-27 14:13:24 -07:00
2021-03-25 09:22:55 -07:00
2021-04-30 11:20:38 -07:00
2021-02-26 09:41:00 -08:00
2020-09-28 12:16:13 +02:00
2021-04-09 18:48:22 +05:30
2017-11-02 11:10:55 +01:00
2020-10-16 11:11:19 -07:00
2021-04-04 18:29:37 -04:00
2020-08-28 12:37:42 +02:00
2021-02-24 13:38:33 -08:00
2021-04-30 11:20:42 -07:00
2021-03-25 09:22:55 -07:00
2021-04-30 11:20:43 -07:00
2021-04-08 16:04:20 -07:00
2021-04-09 14:54:23 -07:00
2017-11-02 11:10:55 +01:00
2021-03-29 15:56:48 +02:00
2021-04-08 22:18:36 -07:00
2021-04-07 14:43:28 -07:00
2021-04-23 10:14:32 +01:00
2021-04-19 15:41:28 -07:00
2020-07-15 07:45:25 -07:00
2021-03-22 15:01:45 -04:00
2021-03-22 10:19:00 -04:00
2020-08-19 13:47:15 +02:00
2021-04-06 08:34:39 +02:00
2021-04-02 16:26:33 +02:00
2019-02-08 15:02:49 -08:00
2021-01-26 11:12:00 -06:00
2021-04-13 14:35:02 -07:00
2021-04-21 10:24:41 -05:00
2021-04-26 08:51:23 -07:00
2021-04-01 14:07:41 -07:00
2020-07-23 17:34:18 +10:00
2021-04-30 11:20:42 -07:00
2020-08-07 11:33:29 -07:00
2021-04-30 11:20:37 -07:00
2021-02-26 09:40:59 -08:00
2021-04-30 11:20:41 -07:00
2021-04-29 11:57:23 -07:00
2020-09-11 09:30:01 +03:00
2021-05-01 10:14:08 -07:00
2021-03-10 10:56:46 +00:00
2021-04-20 16:08:02 -07:00
2021-04-02 17:02:31 +02:00
2021-04-08 19:14:46 +02:00
2021-04-07 19:18:23 +02:00
2021-04-28 15:43:58 -07:00
2021-03-24 12:48:38 -07:00
2021-03-17 16:34:08 +01:00
2021-04-05 13:18:22 +02:00
2021-04-21 12:20:04 -04:00
2021-04-07 16:33:07 +01:00
2021-04-12 14:49:31 +02:00
2020-08-03 23:24:26 -07:00
2021-04-08 14:05:19 +02:00
2020-10-13 18:38:28 -07:00
2021-04-28 12:00:13 -07:00
2021-03-24 17:16:15 -07:00
2021-03-22 08:23:48 -07:00
2020-05-20 03:39:40 -04:00
2021-03-31 13:53:38 +01:00
2019-10-29 10:47:14 +00:00
2020-12-11 12:47:17 +01:00
2020-06-30 17:18:56 -04:00
2021-01-16 23:19:26 +01:00
2021-03-29 15:57:03 +02:00
2021-03-22 02:45:52 +01:00
2021-03-18 22:39:30 -04:00
2020-07-20 11:50:47 +01:00
2021-04-30 11:20:36 -07:00
2021-03-30 16:35:16 +01:00
2017-11-02 11:10:55 +01:00
2021-05-01 18:50:44 -07:00
2020-08-18 13:45:20 +02:00
2021-04-27 15:50:15 -07:00
2021-04-22 12:04:26 +02:00
2020-12-15 12:13:43 -08:00
2021-04-11 16:34:56 -07:00
2017-11-02 11:10:55 +01:00
2021-04-28 13:33:57 -07:00
2020-12-10 16:17:15 +01:00
2019-05-30 11:26:32 -07:00
2021-04-01 10:56:13 -07:00
2021-04-25 18:02:32 -07:00
2021-04-26 13:04:19 -07:00
2019-05-28 09:03:35 -07:00
2021-02-26 09:41:04 -08:00
2021-03-10 15:52:31 +01:00
2018-10-09 11:20:55 +02:00
2021-04-19 16:03:15 +02:00
2021-04-28 12:37:53 -07:00
2012-02-24 10:05:59 +01:00
2021-04-22 15:02:40 -07:00
2018-04-28 15:01:14 -07:00
2018-02-05 21:34:50 +01:00
2020-12-02 15:07:56 +01:00
2021-05-01 18:50:44 -07:00
2021-03-25 17:39:33 -07:00
2021-01-12 14:26:31 +01:00
2021-04-11 19:30:25 -06:00
2020-07-27 14:11:22 +02:00
2020-03-21 17:48:13 +01:00
2021-04-16 21:03:50 +02:00
2019-08-23 02:12:11 +02:00
2021-04-07 16:33:20 +01:00
2017-11-02 11:10:55 +01:00
2021-03-22 23:06:48 +01:00
2017-11-02 11:10:55 +01:00
2021-04-14 16:30:30 +03:00
2020-12-07 18:25:02 -05:00
2021-02-02 17:02:05 -05:00
2021-04-10 10:36:34 +02:00
2021-04-15 10:32:17 +02:00
2021-04-03 21:22:18 +11:00
2021-03-30 17:06:49 -07:00
2021-04-26 22:55:12 +01:00
2021-04-09 16:00:00 +02:00
2021-04-29 11:06:13 -07:00
2005-04-16 15:20:36 -07:00
2021-03-19 22:23:19 +01:00
2021-04-06 11:55:11 -06:00
2021-03-22 15:02:14 +01:00
2012-10-13 10:46:48 +01:00
2021-04-06 16:17:57 -07:00
2021-04-30 11:20:40 -07:00
2021-04-30 11:20:37 -07:00
2017-11-02 11:10:55 +01:00
2021-03-19 12:13:10 +01:00
2021-04-16 15:31:02 -07:00
2021-03-30 13:42:33 -04:00
2015-11-06 17:50:42 -08:00
17ae69aba8