Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps

2024-03-01 Thread Seth Forshee (DigitalOcean)
On Fri, Mar 01, 2024 at 04:59:16PM +0100, Roberto Sassu wrote: > On Wed, 2024-02-21 at 15:24 -0600, Seth Forshee (DigitalOcean) wrote: > > In preparation for moving fscaps out of the xattr code paths, add new > > security hooks. These hooks are largely needed because common kernel > > code will

Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps

2024-03-01 Thread Roberto Sassu
On Wed, 2024-02-21 at 15:24 -0600, Seth Forshee (DigitalOcean) wrote: > In preparation for moving fscaps out of the xattr code paths, add new > security hooks. These hooks are largely needed because common kernel > code will pass around struct vfs_caps pointers, which EVM will need to > convert to

Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps

2024-02-23 Thread Christian Brauner
On Wed, Feb 21, 2024 at 03:24:42PM -0600, Seth Forshee (DigitalOcean) wrote: > In preparation for moving fscaps out of the xattr code paths, add new > security hooks. These hooks are largely needed because common kernel > code will pass around struct vfs_caps pointers, which EVM will need to >

Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps

2024-02-21 Thread Seth Forshee (DigitalOcean)
On Wed, Feb 21, 2024 at 06:31:42PM -0500, Paul Moore wrote: > On Wed, Feb 21, 2024 at 4:26 PM Seth Forshee (DigitalOcean) > wrote: > > > > In preparation for moving fscaps out of the xattr code paths, add new > > security hooks. These hooks are largely needed because common kernel > > code will

Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps

2024-02-21 Thread Paul Moore
On Wed, Feb 21, 2024 at 4:26 PM Seth Forshee (DigitalOcean) wrote: > > In preparation for moving fscaps out of the xattr code paths, add new > security hooks. These hooks are largely needed because common kernel > code will pass around struct vfs_caps pointers, which EVM will need to > convert to

[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps

2024-02-21 Thread Seth Forshee (DigitalOcean)
In preparation for moving fscaps out of the xattr code paths, add new security hooks. These hooks are largely needed because common kernel code will pass around struct vfs_caps pointers, which EVM will need to convert to raw xattr data for verification and updates of its hashes. Signed-off-by: