Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #73666
| From | Mickaël Salaün <mic@digikod.net> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#999551: Support Landlock by default in Debian kernels |
| Date | 2021-11-12 15:00 +0100 |
| Message-ID | <DiFfX-62u-1@gated-at.bofh.it> (permalink) |
| References | <DiD4t-4OK-1@gated-at.bofh.it> <DiE0x-5ns-1@gated-at.bofh.it> <DiD4t-4OK-1@gated-at.bofh.it> <DiE0x-5ns-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
On 12/11/2021 13:34, Yves-Alexis Perez wrote: > Hey Mickaël, kernel team, > > On Fri, 2021-11-12 at 12:23 +0100, Mickaël Salaün wrote: >> - >> CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack >> ,to >> moyo" >> +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,apparmor,sel >> in >> ux,smack,tomoyo" > > At first sight the change looks reasonable, but just to check: right now there > is there is no userland stuff using Landlock LSM packaged in Debian? So > nothing is currently broken by not having the above, it's just more practical > when testing or using the feature? > > (not saying we shouldn't enable it, it's just so we know what exactly we gain > or not). Applications using Landlock should not break if the feature is not supported by the running kernel (best-effort security). Whether some Debian packaged applications are using Landlock or not doesn't seem important since users can download and run their own applications, right?
Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 12:40 +0100
Bug#999551: Support Landlock by default in Debian kernels Yves-Alexis Perez <corsac@debian.org> - 2021-11-12 13:40 +0100
Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 15:00 +0100
Processed: Re: Bug#999551: Support Landlock by default in Debian kernels "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-11-12 14:00 +0100
Bug#999551: Support Landlock by default in Debian kernels Bastian Blank <waldi@debian.org> - 2021-11-12 14:00 +0100
Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 14:50 +0100
Bug#999551: Support Landlock by default in Debian kernels Brad Tilley <brad@vt.edu> - 2022-03-30 13:50 +0200
Bug#999551: marked as done (Support Landlock by default in Debian kernels) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-08-02 20:10 +0200
Bug#999551: marked as done (Support Landlock by default in Debian kernels) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-08-11 08:10 +0200
csiph-web