Re: [PATCH] Yama: allow access for the current ptrace parent

2016-12-04 Thread James Morris
On Fri, 2 Dec 2016, Kees Cook wrote: > James, can you pull this into your -next tree? I made a tiny fix to the > comment style, but it is otherwise identical to what Josh sent originally. Applied, thanks! -- James Morris

Re: [GIT PULL] tpmdd updates for Linux 4.10

2016-11-27 Thread James Morris
able to add event log for TPM 2.0. > Pulled, thanks. -- James Morris <jmor...@namei.org>

Re: [GIT PULL] tpmdd updates for Linux 4.10

2016-11-27 Thread James Morris
able to add event log for TPM 2.0. > Pulled, thanks. -- James Morris

Re: [PATCH 0/2] KEYS: Fixes

2016-11-24 Thread James Morris
On Thu, 24 Nov 2016, David Howells wrote: > James Morris <jmor...@namei.org> wrote: > > > $ git pull > > git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git > > keys-fixes-20161124-3 > > fatal: Couldn't find remote ref keys-fixes-201611

Re: [PATCH 0/2] KEYS: Fixes

2016-11-24 Thread James Morris
On Thu, 24 Nov 2016, David Howells wrote: > James Morris wrote: > > > $ git pull > > git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git > > keys-fixes-20161124-3 > > fatal: Couldn't find remote ref keys-fixes-20161124-3 > > Ummm... Weird

[GIT PULL] Keys fixes

2016-11-24 Thread James Morris
Please pull these fixes for the keys code. >From David: " (1) Fix mpi_powm()'s handling of a number with a zero exponent [CVE-2016-8650]. (2) Fix double free in X.509 error handling. Ver #3: - Integrate my and Andrey's patches for mpi_powm() and use mpi_resize() instead of

[GIT PULL] Keys fixes

2016-11-24 Thread James Morris
Please pull these fixes for the keys code. >From David: " (1) Fix mpi_powm()'s handling of a number with a zero exponent [CVE-2016-8650]. (2) Fix double free in X.509 error handling. Ver #3: - Integrate my and Andrey's patches for mpi_powm() and use mpi_resize() instead of

Re: [PATCH 0/2] KEYS: Fixes

2016-11-24 Thread James Morris
On Thu, 24 Nov 2016, David Howells wrote: > James Morris <jmor...@namei.org> wrote: > > > $ git pull > > git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git > > keys-fixes-20161124 > > fatal: Couldn't find remote ref keys-fixes-20161124 >

Re: [PATCH 0/2] KEYS: Fixes

2016-11-24 Thread James Morris
On Thu, 24 Nov 2016, David Howells wrote: > James Morris wrote: > > > $ git pull > > git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git > > keys-fixes-20161124 > > fatal: Couldn't find remote ref keys-fixes-20161124 > > I've produced tw

Re: [PATCH 0/2] KEYS: Fixes

2016-11-24 Thread James Morris
keys-fixes-20161124 $ git pull git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git keys-fixes-20161124 fatal: Couldn't find remote ref keys-fixes-20161124 -- James Morris <jmor...@namei.org>

Re: [PATCH 0/2] KEYS: Fixes

2016-11-24 Thread James Morris
keys-fixes-20161124 $ git pull git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git keys-fixes-20161124 fatal: Couldn't find remote ref keys-fixes-20161124 -- James Morris

[GIT PULL][SECURITY] Apparmor bugfix

2016-11-20 Thread James Morris
Signed-off-by: John Johansen <john.johan...@canonical.com> Signed-off-by: James Morris <james.l.mor...@oracle.com> diff --git a/security/apparmor/domain.c b/security/apparmor/domain.c index fc3036b..a4d90aa 100644 --- a/security/apparmor/domain.c +++ b/security/apparmor/domain.c @@ -62

[GIT PULL][SECURITY] Apparmor bugfix

2016-11-20 Thread James Morris
Fixes: 01e2b670aa898a39259bc85c78e3d74820f4d3b6 (failure to find hat) Fixes: 898127c34ec03291c86f4ff3856d79e9e18952bc (stale policy being applied) Bugzilla: https://bugzilla.suse.com/show_bug.cgi?id=1000287 Cc: sta...@vger.kernel.org Signed-off-by: John Johansen Signed-

Re: [PATCH 1/1 V2] mqueue: Implment generic xattr support

2016-11-07 Thread James Morris
x named type transition on file inodes created within > the filesystem. The implementation and LSM call back function are based > off tmpfs/shmem. > > Signed-off-by: David Graziano <david.grazi...@rockwellcollins.com> Acked-by: James Morris <james.l.mor...@oracle.com> -- James Morris <jmor...@namei.org>

Re: [PATCH 1/1 V2] mqueue: Implment generic xattr support

2016-11-07 Thread James Morris
x named type transition on file inodes created within > the filesystem. The implementation and LSM call back function are based > off tmpfs/shmem. > > Signed-off-by: David Graziano Acked-by: James Morris -- James Morris

Re: [PATCH 3/3] tpm: move documentation under Documentation/security

2016-11-04 Thread James Morris
the tpm > > > directory under Documentation/security. > > > > FWIW I like this. > > Thx. I just realized that I should have CC'd to linux-security-module > to get say from James as this makes path for the whole security tree. > > James, sorry about that. Can you sha

Re: [PATCH 3/3] tpm: move documentation under Documentation/security

2016-11-04 Thread James Morris
ntation/security. > > > > FWIW I like this. > > Thx. I just realized that I should have CC'd to linux-security-module > to get say from James as this makes path for the whole security tree. > > James, sorry about that. Can you share your opinion? Looks like a good idea to me. -- James Morris

Re: [GIT PULL] seccomp fixes for v4.9-rc4

2016-11-04 Thread James Morris
On Tue, 1 Nov 2016, Kees Cook wrote: > > How about we queue this up for 4.10? > > Okay, sounds good to me. Thanks! Pulled to -next. -- James Morris <jmor...@namei.org>

Re: [GIT PULL] seccomp fixes for v4.9-rc4

2016-11-04 Thread James Morris
On Tue, 1 Nov 2016, Kees Cook wrote: > > How about we queue this up for 4.10? > > Okay, sounds good to me. Thanks! Pulled to -next. -- James Morris

Re: [GIT PULL] seccomp fixes for v4.9-rc4

2016-11-01 Thread James Morris
le truncation > - fix samples hostprogs variable in Makefile > > These fixes don't seem very critical, and Linus was talking yesterday at KS about too much churn in the -rc series with non-critical fixes. How about we queue

Re: [GIT PULL] seccomp fixes for v4.9-rc4

2016-11-01 Thread James Morris
le truncation > - fix samples hostprogs variable in Makefile > > These fixes don't seem very critical, and Linus was talking yesterday at KS about too much churn in the -rc series with non-critical fixes. How about we queue

[GIT PULL] TPM bugfix

2016-10-31 Thread James Morris
en <jarkko.sakki...@linux.intel.com> Signed-off-by: James Morris <james.l.mor...@oracle.com> diff --git a/drivers/char/tpm/tpm-interface.c b/drivers/char/tpm/tpm-interface.c index 8de6187..3a9149c 100644 --- a/drivers/char/tpm/tpm-interface.c +++ b/drivers/char/tpm/tpm-interface.c @@ -813,9 +813,6 @

[GIT PULL] TPM bugfix

2016-10-31 Thread James Morris
tpm_do_selftest() Removal of this check was not properly amended to the original commit. Cc: sta...@vger.kernel.org Fixes: 0c541332231e ("tpm: use tpm_pcr_read_dev() in tpm_do_selftest()") Signed-off-by: Jarkko Sakkinen Signed-off-by: James Morris diff --git a/dr

Re: [PATCH v6 0/3] LSM: security module information improvements

2016-10-28 Thread James Morris
ative infrastructure to the kernel. There is no consensus that we need major module stacking, and some of the technical issues (network secids, for example) are also as yet unresolved. - James -- James Morris <jmor...@namei.org>

Re: [PATCH v6 0/3] LSM: security module information improvements

2016-10-28 Thread James Morris
ative infrastructure to the kernel. There is no consensus that we need major module stacking, and some of the technical issues (network secids, for example) are also as yet unresolved. - James -- James Morris

Re: [PATCH v6 0/3] LSM: security module information improvements

2016-10-27 Thread James Morris
ested this, or is likely to adopt it into a distro? -- James Morris <jmor...@namei.org>

Re: [PATCH v6 0/3] LSM: security module information improvements

2016-10-27 Thread James Morris
ested this, or is likely to adopt it into a distro? -- James Morris

[GIT PULL] Keys fixes

2016-10-26 Thread James Morris
Please pull these fixes from David Howells: (1) Fix a buffer overflow when displaying /proc/keys [CVE-2016-7042]. (2) Fix broken initialisation in the big_key implementation that can result in an oops. (3) Make big_key depend on having a random number generator available in

[GIT PULL] Keys fixes

2016-10-26 Thread James Morris
Please pull these fixes from David Howells: (1) Fix a buffer overflow when displaying /proc/keys [CVE-2016-7042]. (2) Fix broken initialisation in the big_key implementation that can result in an oops. (3) Make big_key depend on having a random number generator available in

Re: [PATCH 0/8] CaitSith LSM module

2016-10-23 Thread James Morris
hat AppArmor will be gaining more support for security labels. JJ: is that correct? -- James Morris <jmor...@namei.org>

Re: [PATCH 0/8] CaitSith LSM module

2016-10-23 Thread James Morris
hat AppArmor will be gaining more support for security labels. JJ: is that correct? -- James Morris

[GIT PULL] Security subsystem updates for 4.9

2016-10-04 Thread James Morris
s up to 1306d8e1c09fdc8ecb9ef235e2116352f810f9c5: Merge tag 'tpmdd-next-20160927' of git://git.infradead.org/users/jjs/linux-tpmdd into ra-next (2016-09-27 19:21:37 +1000) Casey Schaufler (1): Smack: Signal delivery as an append operation James Morri

[GIT PULL] Security subsystem updates for 4.9

2016-10-04 Thread James Morris
s up to 1306d8e1c09fdc8ecb9ef235e2116352f810f9c5: Merge tag 'tpmdd-next-20160927' of git://git.infradead.org/users/jjs/linux-tpmdd into ra-next (2016-09-27 19:21:37 +1000) Casey Schaufler (1): Smack: Signal delivery as an append operation James Morri

Re: [GIT PULL] tpmdd reverts for Linux 4.9

2016-09-27 Thread James Morris
d.org/users/jjs/linux-tpmdd.git tags/tpmdd-next-20160927 > Pulled, thanks. -- James Morris <jmor...@namei.org>

Re: [GIT PULL] tpmdd reverts for Linux 4.9

2016-09-27 Thread James Morris
d.org/users/jjs/linux-tpmdd.git tags/tpmdd-next-20160927 > Pulled, thanks. -- James Morris

Re: [GIT PULL] tpmdd updates for Linux 4.9

2016-09-18 Thread James Morris
d.git master > > for you to fetch changes up to ebfd7532e985818a327906e011f3e43c8ddfdd74: > > tpm: add check for minimum buffer size in tpm_transmit() (2016-09-15 > 16:04:21 +0300) Pulled, thanks. -- James Morris <jmor...@namei.org>

Re: [GIT PULL] tpmdd updates for Linux 4.9

2016-09-18 Thread James Morris
d.git master > > for you to fetch changes up to ebfd7532e985818a327906e011f3e43c8ddfdd74: > > tpm: add check for minimum buffer size in tpm_transmit() (2016-09-15 > 16:04:21 +0300) Pulled, thanks. -- James Morris

Re: [GIT PULL] seccomp fixes for v4.8-rc6

2016-09-07 Thread James Morris
Actually I asked if you could send them to me... On 08/09/16 02:29, Kees Cook wrote: Hi, Please pull these seccomp fixes for v4.8-rc6. These got accidentally put in James's -next tree, but they're needed for v4.8. He asked me to forward them directly to you. Thanks! -Kees The following

Re: [GIT PULL] seccomp fixes for v4.8-rc6

2016-09-07 Thread James Morris
Actually I asked if you could send them to me... On 08/09/16 02:29, Kees Cook wrote: Hi, Please pull these seccomp fixes for v4.8-rc6. These got accidentally put in James's -next tree, but they're needed for v4.8. He asked me to forward them directly to you. Thanks! -Kees The following

[GIT PULL] TPM bugfix

2016-09-02 Thread James Morris
Factor out common startup code") Reviewed-by: James Morris <james.l.mor...@oracle.com> diff --git a/drivers/char/tpm/tpm2-cmd.c b/drivers/char/tpm/tpm2-cmd.c index 08c7e23..0c75c3f 100644 --- a/drivers/char/tpm/tpm2-cmd.c +++ b/drivers/char/tpm/tpm2-cmd.c @@ -957,7 +957,7 @@ int tpm2_

[GIT PULL] TPM bugfix

2016-09-02 Thread James Morris
2016 +0300 tpm: invalid self test error message The driver emits invalid self test error message even though the init succeeds. Signed-off-by: Jarkko Sakkinen Fixes: cae8b441fc20 ("tpm: Factor out common startup code") Reviewed-by: James Morris

Re: [PATCH] tpm: invalid self test error message

2016-09-02 Thread James Morris
On Fri, 2 Sep 2016, Jarkko Sakkinen wrote: > The driver emits invalid self test error message even though the init > succeeds. > > Signed-off-by: Jarkko Sakkinen <jarkko.sakki...@linux.intel.com> Reviewed-by: James Morris <james.l.mor...@oracle.com> -- James Morris <jmor...@namei.org>

Re: [PATCH] tpm: invalid self test error message

2016-09-02 Thread James Morris
On Fri, 2 Sep 2016, Jarkko Sakkinen wrote: > The driver emits invalid self test error message even though the init > succeeds. > > Signed-off-by: Jarkko Sakkinen Reviewed-by: James Morris -- James Morris

Re: [GIT PULL] seccomp fix for v4.8-rc4

2016-08-30 Thread James Morris
On 30/08/16 15:28, Kees Cook wrote: Hi James, Are you able to forward this up to Linus, or would it be better for me to send this to him directly? You can send it to him directly. Acked-by: James Morris <james.l.mor...@oracle.com> Thanks! -Kees On Tue, Aug 23, 2016 at 3:34 PM

Re: [GIT PULL] seccomp fix for v4.8-rc4

2016-08-30 Thread James Morris
On 30/08/16 15:28, Kees Cook wrote: Hi James, Are you able to forward this up to Linus, or would it be better for me to send this to him directly? You can send it to him directly. Acked-by: James Morris Thanks! -Kees On Tue, Aug 23, 2016 at 3:34 PM, Kees Cook wrote: Hi, Please

Re: [PATCH v2 0/3] Fix seccomp for UM (next)

2016-08-08 Thread James Morris
rg/pub/scm/linux/kernel/git/jmorris/linux-security.git next -- James Morris <jmor...@namei.org>

Re: [PATCH v2 0/3] Fix seccomp for UM (next)

2016-08-08 Thread James Morris
rg/pub/scm/linux/kernel/git/jmorris/linux-security.git next -- James Morris

Re: [PATCH v1] module: Fully remove the kernel_module_from_file hook

2016-08-01 Thread James Morris
On Sun, 31 Jul 2016, Mimi Zohar wrote: > On Do, 2016-07-28 at 11:30 -0700, Kees Cook wrote: > > On Tue, Jul 12, 2016 at 5:48 AM, James Morris <jmor...@namei.org> wrote: > > > On Sat, 9 Jul 2016, Mickaël Salaün wrote: > > > > > >> Fixes: a1db7

Re: [PATCH v1] module: Fully remove the kernel_module_from_file hook

2016-08-01 Thread James Morris
On Sun, 31 Jul 2016, Mimi Zohar wrote: > On Do, 2016-07-28 at 11:30 -0700, Kees Cook wrote: > > On Tue, Jul 12, 2016 at 5:48 AM, James Morris wrote: > > > On Sat, 9 Jul 2016, Mickaël Salaün wrote: > > > > > >> Fixes: a1db74209483 ("module: replace cop

Re: [PATCH v1 0/3] Fix seccomp for UM (next)

2016-07-31 Thread James Morris
his up for -next? > > > > Acked-by: Kees Cook <keesc...@chromium.org> > > James, can you take these fixes for v4.8? We'll need them for um to > work correctly again. (They appear to still be missing from -next.) > I'm pretty sure I don't have these patches, can you or the author send them to me? -- James Morris <jmor...@namei.org>

Re: [PATCH v1 0/3] Fix seccomp for UM (next)

2016-07-31 Thread James Morris
Cook > > James, can you take these fixes for v4.8? We'll need them for um to > work correctly again. (They appear to still be missing from -next.) > I'm pretty sure I don't have these patches, can you or the author send them to me? -- James Morris

Re: [GIT PULL] Security subsystem updates for 4.8

2016-07-27 Thread James Morris
On Wed, 27 Jul 2016, David Miller wrote: > From: Linus Torvalds <torva...@linux-foundation.org> > Date: Wed, 27 Jul 2016 11:50:46 -0700 > > > On Wed, Jul 27, 2016 at 4:04 AM, James Morris <jmor...@namei.org> wrote: > >> > >> Highlights: > >>

Re: [GIT PULL] Security subsystem updates for 4.8

2016-07-27 Thread James Morris
On Wed, 27 Jul 2016, David Miller wrote: > From: Linus Torvalds > Date: Wed, 27 Jul 2016 11:50:46 -0700 > > > On Wed, Jul 27, 2016 at 4:04 AM, James Morris wrote: > >> > >> Highlights: > >> > >> - TPM core and driver updates/fixes > >>

[GIT PULL] Security subsystem updates for 4.8

2016-07-27 Thread James Morris
: Pass a family parameter to netlbl_skbuff_err(). calipso: Add validation of CALIPSO option. calipso: Add a label cache. netlabel: Implement CALIPSO config functions for SMACK. James Morris (3): Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux

[GIT PULL] Security subsystem updates for 4.8

2016-07-27 Thread James Morris
: Pass a family parameter to netlbl_skbuff_err(). calipso: Add validation of CALIPSO option. calipso: Add a label cache. netlabel: Implement CALIPSO config functions for SMACK. James Morris (3): Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux

Re: [PATCH] apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling

2016-07-26 Thread James Morris
l whether policy > hashing is used") > Signed-off-by: John Johansen <john.johan...@canonical.com> Please rebase this against current Linus. -- James Morris <jmor...@namei.org>

Re: [PATCH] apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling

2016-07-26 Thread James Morris
;) > Signed-off-by: John Johansen Please rebase this against current Linus. -- James Morris

Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support

2016-07-21 Thread James Morris
On Thu, 21 Jul 2016, Paul Moore wrote: > James, assuming the overlayfs-next branch is pulled during the merge > window, can you rebase your linux-security#next branch to v4.8-rc1 > once Linus tags it? Yep. -- James Morris <jmor...@namei.org>

Re: [RFC PATCH 0/9][V3] Overlayfs SELinux Support

2016-07-21 Thread James Morris
On Thu, 21 Jul 2016, Paul Moore wrote: > James, assuming the overlayfs-next branch is pulled during the merge > window, can you rebase your linux-security#next branch to v4.8-rc1 > once Linus tags it? Yep. -- James Morris

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-21 Thread James Morris
On Wed, 20 Jul 2016, John Stultz wrote: > On Tue, Jul 19, 2016 at 11:12 PM, James Morris <jmor...@namei.org> wrote: > > On Mon, 18 Jul 2016, John Stultz wrote: > > > >> As requested, this patch implements a task_settimerslack and > >> task_gettimerslack LSM

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-21 Thread James Morris
On Wed, 20 Jul 2016, John Stultz wrote: > On Tue, Jul 19, 2016 at 11:12 PM, James Morris wrote: > > On Mon, 18 Jul 2016, John Stultz wrote: > > > >> As requested, this patch implements a task_settimerslack and > >> task_gettimerslack LSM hooks so that the /proc/

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-20 Thread James Morris
_SYS_NICE check in the timerslack_ns_write/show > functions, as hiding it in the LSM hook seems too opaque, and doesn't > seem like a widely enough adopted practice. > I may have missed something in the earlier discussion, but why do we need new LSM hooks here vs. calling the existing set/getscheduler hooks?

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-20 Thread James Morris
_SYS_NICE check in the timerslack_ns_write/show > functions, as hiding it in the LSM hook seems too opaque, and doesn't > seem like a widely enough adopted practice. > I may have missed something in the earlier discussion, but why do we need new LSM hooks here vs. calling the existing set/getscheduler hooks? -- James Morris

Re: [GIT PULL] tpmdd fixes for Linux 4.8

2016-07-19 Thread James Morris
d-next-20160719 > > for you to fetch changes up to 82cc1a49b6358394938e759dc4c22b2be773bbad: > > tpm: Add TPM 2.0 support to the Nuvoton i2c driver (NPCT6xx family) > (2016-07-19 17:43:38 +0300) > Pulled, thanks. -- James Morris <jmor...@namei.org>

Re: [GIT PULL] tpmdd fixes for Linux 4.8

2016-07-19 Thread James Morris
d-next-20160719 > > for you to fetch changes up to 82cc1a49b6358394938e759dc4c22b2be773bbad: > > tpm: Add TPM 2.0 support to the Nuvoton i2c driver (NPCT6xx family) > (2016-07-19 17:43:38 +0300) > Pulled, thanks. -- James Morris

[GIT PULL] KEYS fixes

2016-07-17 Thread James Morris
Please pull these fixes for the keys code. >From David Howells: " Here are three miscellaneous fixes: (1) Fix a panic in some debugging code in PKCS#7. This can only happen by explicitly inserting a #define DEBUG into the code. (2) Fix the calculation of the digest length in the PE

[GIT PULL] KEYS fixes

2016-07-17 Thread James Morris
Please pull these fixes for the keys code. >From David Howells: " Here are three miscellaneous fixes: (1) Fix a panic in some debugging code in PKCS#7. This can only happen by explicitly inserting a #define DEBUG into the code. (2) Fix the calculation of the digest length in the PE

Re: [PATCH v1] module: Fully remove the kernel_module_from_file hook

2016-07-12 Thread James Morris
@chromium.org> > Cc: Luis R. Rodriguez <mcg...@kernel.org> > Cc: Rusty Russell <ru...@rustcorp.com.au> > Cc: Linus Torvalds <torva...@linux-foundation.org> > Cc: Greg Kroah-Hartman <gre...@linuxfoundation.org> Acked-by: James Morris <james.l.mor...@oracle.com> -- James Morris <jmor...@namei.org>

Re: [PATCH v1] module: Fully remove the kernel_module_from_file hook

2016-07-12 Thread James Morris
us Torvalds > Cc: Greg Kroah-Hartman Acked-by: James Morris -- James Morris

Re: [PATCH v5 0/3] LSM: security module information improvements - Acked

2016-07-08 Thread James Morris
.8 merge window closes. -- James Morris <jmor...@namei.org>

Re: [PATCH v5 0/3] LSM: security module information improvements - Acked

2016-07-08 Thread James Morris
.8 merge window closes. -- James Morris

[GIT PULL] Fix for AppArmor oops in apparmor_setprocattr()

2016-07-07 Thread James Morris
.@parisplace.org> Cc: Casey Schaufler <ca...@schaufler-ca.com> Cc: sta...@kernel.org Signed-off-by: John Johansen <john.johan...@canonical.com> Reviewed-by: Tyler Hicks <tyhi...@canonical.com> Signed-off-by: James Morris <james.l.mor...@oracle.com> diff

[GIT PULL] Fix for AppArmor oops in apparmor_setprocattr()

2016-07-07 Thread James Morris
Johansen Cc: Paul Moore Cc: Stephen Smalley Cc: Eric Paris Cc: Casey Schaufler Cc: sta...@kernel.org Signed-off-by: John Johansen Reviewed-by: Tyler Hicks Signed-off-by: James Morris diff --git a/security/apparmor/lsm.c b/security/apparmor/lsm.c index 2660fbc

Re: [PULL] seccomp update (next)

2016-07-07 Thread James Morris
On Thu, 7 Jul 2016, Kees Cook wrote: > Hi, > > Please pull these seccomp changes for next. Pulled, thanks. -- James Morris <jmor...@namei.org>

Re: [PULL] seccomp update (next)

2016-07-07 Thread James Morris
On Thu, 7 Jul 2016, Kees Cook wrote: > Hi, > > Please pull these seccomp changes for next. Pulled, thanks. -- James Morris

Re: [GIT PULL] tpmdd updates for Linux 4.8

2016-06-26 Thread James Morris
small fixes and cleanups. > Pulled, thanks. -- James Morris <jmor...@namei.org>

Re: [GIT PULL] tpmdd updates for Linux 4.8

2016-06-26 Thread James Morris
small fixes and cleanups. > Pulled, thanks. -- James Morris

Re: [PULL] seccomp update (next)

2016-06-17 Thread James Morris
On Tue, 14 Jun 2016, Kees Cook wrote: > Hi, > > Please pull these seccomp changes for next. These have been tested by > myself and Andy, and close a long-standing issue with seccomp where tracers > could change the syscall out from under seccomp. Pulled to security -next. -

Re: [PULL] seccomp update (next)

2016-06-17 Thread James Morris
On Tue, 14 Jun 2016, Kees Cook wrote: > Hi, > > Please pull these seccomp changes for next. These have been tested by > myself and Andy, and close a long-standing issue with seccomp where tracers > could change the syscall out from under seccomp. Pulled to security -next. -- James Morris

Re: [PATCH] security: tomoyo: simplify the gc kthread creation

2016-06-06 Thread James Morris
d to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next -- James Morris <jmor...@namei.org>

Re: [PATCH] security: tomoyo: simplify the gc kthread creation

2016-06-06 Thread James Morris
On Fri, 20 May 2016, Tetsuo Handa wrote: > Mike Danese wrote: > > The code is doing the equivalent of the kthread_run macro. > > > > Signed-off-by: Mike Danese > > Acked-by: Tetsuo Handa Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-se

Re: [PATCH RESEND 2/2] net: Use ns_capable_noaudit() when determining net sysctl permissions

2016-06-06 Thread James Morris
ttps://launchpad.net/bugs/1465724 > > Signed-off-by: Tyler Hicks <tyhi...@canonical.com> > Acked-by: Serge E. Hallyn <serge.hal...@ubuntu.com> Both applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next -- James Morris <jmor...@namei.org>

Re: [PATCH RESEND 2/2] net: Use ns_capable_noaudit() when determining net sysctl permissions

2016-06-06 Thread James Morris
ttps://launchpad.net/bugs/1465724 > > Signed-off-by: Tyler Hicks > Acked-by: Serge E. Hallyn Both applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next -- James Morris

Re: [PATCH] LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP

2016-06-06 Thread James Morris
schaufler-ca.com> Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next -- James Morris <jmor...@namei.org>

Re: [PATCH] LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP

2016-06-06 Thread James Morris
o git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next -- James Morris

[GIT PULL] Keys keyctl placeholder

2016-06-02 Thread James Morris
Signed-off-by: Stephan Mueller <smuel...@chronox.de> Signed-off-by: David Howells <dhowe...@redhat.com> Signed-off-by: James Morris <james.l.mor...@oracle.com> diff --git a/Documentation/security/keys.txt b/Documentation/security/keys.txt index 20d0571..3849814 100644 ---

[GIT PULL] Keys keyctl placeholder

2016-06-02 Thread James Morris
Signed-off-by: James Morris diff --git a/Documentation/security/keys.txt b/Documentation/security/keys.txt index 20d0571..3849814 100644 --- a/Documentation/security/keys.txt +++ b/Documentation/security/keys.txt @@ -826,7 +826,8 @@ The keyctl syscall functions are: (*) Compute a Diffie-Hell

Re: [PATCH 0/2] Quiet noisy LSM denial when accessing net sysctl

2016-06-02 Thread James Morris
se two bug fix patches? Thanks! > > Hello - Just checking in again to see if you plan on taking these > through the security tree? Sure, please resend. -- James Morris <jmor...@namei.org>

Re: [PATCH 0/2] Quiet noisy LSM denial when accessing net sysctl

2016-06-02 Thread James Morris
t; Hello - Just checking in again to see if you plan on taking these > through the security tree? Sure, please resend. -- James Morris

[GIT PULL][SECURITY] Yama locking fix

2016-05-25 Thread James Morris
This patch is tested both for ptrace attach and ptrace traceme. Fixes: 8a56038c2aef ("Yama: consolidate error reporting") Signed-off-by: Jann Horn <j...@thejh.net> Acked-by: Kees Cook <keesc...@chromium.org> Signed-off-by: James Morris <james.l.mor...@orac

[GIT PULL][SECURITY] Yama locking fix

2016-05-25 Thread James Morris
oth for ptrace attach and ptrace traceme. Fixes: 8a56038c2aef ("Yama: consolidate error reporting") Signed-off-by: Jann Horn Acked-by: Kees Cook Signed-off-by: James Morris diff --git a/security/yama/yama_lsm.c b/security/yama/yama_lsm.c index 9b756b1..0309f21 100644 ---

[GIT PULL] Security subsystem updates

2016-05-23 Thread James Morris
at: git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git for-linus David Howells (2): KEYS: The PKCS#7 test key type should use the secondary keyring MAINTAINERS: Update keyrings record and add asymmetric keys record James Morris (1): Merge tag 'keys-next

[GIT PULL] Security subsystem updates

2016-05-23 Thread James Morris
at: git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git for-linus David Howells (2): KEYS: The PKCS#7 test key type should use the secondary keyring MAINTAINERS: Update keyrings record and add asymmetric keys record James Morris (1): Merge tag 'keys-next

Re: [PATCH] doc: self-protection: provide initial details

2016-05-23 Thread James Morris
ther > +disable module loading entirely (e.g. monolithic kernel builds or > +modules_disabled sysctl), or provide signed modules (e.g. > +CONFIG_MODULE_SIG_FORCE, or dm-crypt with LoadPin), to keep from having > +oot load arbitrary kernel code via the module loader interface. Or utilize an a

Re: [PATCH] doc: self-protection: provide initial details

2016-05-23 Thread James Morris
ther > +disable module loading entirely (e.g. monolithic kernel builds or > +modules_disabled sysctl), or provide signed modules (e.g. > +CONFIG_MODULE_SIG_FORCE, or dm-crypt with LoadPin), to keep from having > +oot load arbitrary kernel code via the module loader interface. Or utilize an appropriate MAC policy. -- James Morris

[GIT PULL] security subsystem updates for 4.7

2016-05-18 Thread James Morris
into keys-next Merge branch 'keys-trust' into keys-next Dmitry Kasatkin (1): vfs: forbid write access when reading a file into memory James Morris (2): Merge tag 'keys-next-20160505' of git://git.kernel.org/.../dhowells/linux-fs into next Merge branch 'stable-4.

[GIT PULL] security subsystem updates for 4.7

2016-05-18 Thread James Morris
into keys-next Merge branch 'keys-trust' into keys-next Dmitry Kasatkin (1): vfs: forbid write access when reading a file into memory James Morris (2): Merge tag 'keys-next-20160505' of git://git.kernel.org/.../dhowells/linux-fs into next Merge branch 'stable-4.

Re: 4.6 compilation error when making signing key

2016-05-16 Thread James Morris
CONFIG_MODULE_SIG_KEY="signing_key.pem" This should be 'certs/signing_key.pem', right? I'm not sure how it ended up like that -- perhaps something happened in my next branch (which shares the same .config generally). -- James Morris <jmor...@namei.org>

Re: 4.6 compilation error when making signing key

2016-05-16 Thread James Morris
CONFIG_MODULE_SIG_KEY="signing_key.pem" This should be 'certs/signing_key.pem', right? I'm not sure how it ended up like that -- perhaps something happened in my next branch (which shares the same .config generally). -- James Morris

Re: 4.6 compilation error when making signing key

2016-05-16 Thread James Morris
On Mon, 16 May 2016, David Howells wrote: > James Morris <jmor...@namei.org> wrote: > > > I'm seeing this with the 4.6 kernel build: > > > > CHK include/generated/compile.h > > make[1]: *** No rule to make target `signing_key.pem', needed by > >

<    4   5   6   7   8   9   10   11   12   13   >