Re: [PATCH V34 00/29] Lockdown as an LSM

2019-06-25 Thread John Johansen
On 6/24/19 4:01 PM, James Morris wrote: > On Fri, 21 Jun 2019, Matthew Garrett wrote: > >> Minor updates over V33 - security_is_locked_down renamed to >> security_locked_down, return value of security_locked_down is returned >> in most cases, one unnecessary patch was dropped, couple of minor nits

Re: [PATCH V34 00/29] Lockdown as an LSM

2019-06-24 Thread James Morris
On Mon, 24 Jun 2019, Matthew Garrett wrote: > > We are still not resolved on granularity. Stephen has said he's not sure > > if a useful policy can be constructed with just confidentiality and > > integrity settings. I'd be interested to know JJ and Casey's thoughts on > > lockdown policy flexibil

Re: [PATCH V34 00/29] Lockdown as an LSM

2019-06-24 Thread Matthew Garrett
On Mon, Jun 24, 2019 at 4:01 PM James Morris wrote: > > On Fri, 21 Jun 2019, Matthew Garrett wrote: > > > Minor updates over V33 - security_is_locked_down renamed to > > security_locked_down, return value of security_locked_down is returned > > in most cases, one unnecessary patch was dropped, cou

Re: [PATCH V34 00/29] Lockdown as an LSM

2019-06-24 Thread Casey Schaufler
On 6/24/2019 4:01 PM, James Morris wrote: > On Fri, 21 Jun 2019, Matthew Garrett wrote: > >> Minor updates over V33 - security_is_locked_down renamed to >> security_locked_down, return value of security_locked_down is returned >> in most cases, one unnecessary patch was dropped, couple of minor nit

Re: [PATCH V34 00/29] Lockdown as an LSM

2019-06-24 Thread James Morris
On Fri, 21 Jun 2019, Matthew Garrett wrote: > Minor updates over V33 - security_is_locked_down renamed to > security_locked_down, return value of security_locked_down is returned > in most cases, one unnecessary patch was dropped, couple of minor nits > fixed. Thanks for the respin. We are still

[PATCH V34 00/29] Lockdown as an LSM

2019-06-21 Thread Matthew Garrett
Minor updates over V33 - security_is_locked_down renamed to security_locked_down, return value of security_locked_down is returned in most cases, one unnecessary patch was dropped, couple of minor nits fixed.