Re: [RFC PATCH 0/9] Add LSM access controls and auditing to io_uring

2021-05-26 Thread Jeff Moyer
Paul Moore writes: > On Wed, May 26, 2021 at 10:59 AM Jeff Moyer wrote: >> Paul Moore writes: >> >> > Also, any pointers to easy-to-run io_uring tests would be helpful. I >> > am particularly interested in tests which make use of the personality >> > option, share urings across process boundar

Re: [RFC PATCH 0/9] Add LSM access controls and auditing to io_uring

2021-05-26 Thread Paul Moore
On Wed, May 26, 2021 at 3:06 PM Jeff Moyer wrote: > Paul Moore writes: > > > On Wed, May 26, 2021 at 10:59 AM Jeff Moyer wrote: > >> Paul Moore writes: > >> > >> > Also, any pointers to easy-to-run io_uring tests would be helpful. I > >> > am particularly interested in tests which make use of

Re: [RFC PATCH 0/9] Add LSM access controls and auditing to io_uring

2021-05-26 Thread Paul Moore
On Wed, May 26, 2021 at 10:59 AM Jeff Moyer wrote: > Paul Moore writes: > > > Also, any pointers to easy-to-run io_uring tests would be helpful. I > > am particularly interested in tests which make use of the personality > > option, share urings across process boundaries, and make use of the > >

Re: [RFC PATCH 0/9] Add LSM access controls and auditing to io_uring

2021-05-26 Thread Jeff Moyer
Paul Moore writes: > Also, any pointers to easy-to-run io_uring tests would be helpful. I > am particularly interested in tests which make use of the personality > option, share urings across process boundaries, and make use of the > sqpoll functionality. liburing contains a test suite: https

Re: [RFC PATCH 0/9] Add LSM access controls and auditing to io_uring

2021-05-21 Thread Paul Moore
On Fri, May 21, 2021 at 8:53 PM Tetsuo Handa wrote: > On 2021/05/22 6:49, Paul Moore wrote: > > I've provided the SELinux > > implementation, Casey has been nice enough to provide a Smack patch, > > and John is working on an AppArmor patch as I write this. I've > > mentioned this work to the othe

Re: [RFC PATCH 0/9] Add LSM access controls and auditing to io_uring

2021-05-21 Thread Tetsuo Handa
On 2021/05/22 6:49, Paul Moore wrote: > I've provided the SELinux > implementation, Casey has been nice enough to provide a Smack patch, > and John is working on an AppArmor patch as I write this. I've > mentioned this work to the other LSM maintainers that I believe might > be affected but I have

[RFC PATCH 0/9] Add LSM access controls and auditing to io_uring

2021-05-21 Thread Paul Moore
Earlier this week Kumar Kartikeya Dwivedi posted a patchset switching io_uring over to the anonymous inode variant that allows for LSM controls. While nice, the patchset left the actual LSM controls as an exercise for the reader. The posting can be found using the lore link below: https://lore.k