Bug#999551: Support Landlock by default in Debian kernels

Path	csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!bofh.it!news.nic.it!robomod
From	Brad Tilley <brad@vt.edu>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#999551: Support Landlock by default in Debian kernels
Date	Wed, 30 Mar 2022 13:50:01 +0200
Message-ID	<E6EZP-5dsR-7@gated-at.bofh.it> (permalink)
References	<DiD4t-4OK-1@gated-at.bofh.it>
X-Mailbox-Line	From debian-bugs-dist-request@lists.debian.org Wed Mar 30 11:45:09 2022
Old-Return-Path	<debbugs@buxtehude.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-6.46
Reply-To	Brad Tilley <brad@vt.edu>, 999551@bugs.debian.org
Resent-To	debian-bugs-dist@lists.debian.org
Resent-Cc	Debian Kernel Team <debian-kernel@lists.debian.org>
X-Debian-Pr-Message	followup 999551
X-Debian-Pr-Package	src:linux
X-Debian-Pr-Keywords	patch wontfix
X-Debian-Pr-Source	linux
X-Gm-Message-State	AOAM53203zyQS1qZbhhXeGd9Fb2tLlBUq5WIBRh6vHfZ5GDF26+9HArG 5k49wwWStfefRJTK0oDHwoFOXKq41EaMEMofQBLPbqx5asE=
X-Google-SMTP-Source	ABdhPJwV5KAElsuctFeXQ8/Ur+tVa2YjsjrYEXwROvlR0ju/32BTa7hNRd2UUpMAISJVANcAODg79hW/f1/kvYYFLQg=
X-Received	by 2002:a67:8c0a:0:b0:322:c483:76c1 with SMTP id o10-20020a678c0a000000b00322c48376c1mr19424115vsd.41.1648640459795; Wed, 30 Mar 2022 04:40:59 -0700 (PDT)
MIME-Version	1.0
Content-Type	multipart/alternative; boundary="000000000000f8046d05db6e0455"
X-Debian-Message	from BTS
X-Mailing-List	<debian-bugs-dist@lists.debian.org> archive/latest/1711499
List-ID	<debian-bugs-dist.lists.debian.org>
List-URL	<https://lists.debian.org/debian-bugs-dist/>
Approved	robomod@news.nic.it
Lines	31
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Wed, 30 Mar 2022 07:40:24 -0400
X-Original-Message-ID	<CALD2_yzf2i24QtoBaFK5Phkqryh=CbegTcf=9pfo3pxZuYgb8g@mail.gmail.com>
X-Original-References	<5fe178a1-19d5-90b5-c111-57b095848f57@digikod.net>
Xref	csiph.com linux.debian.bugs.dist:1098669 linux.debian.kernel:74926

Cross-posted to 2 groups.

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

I support enabling this in default Debian kernels. It would allow
application developers to use landlock sandboxing while developing
programs. By not enabling it, developers have to build custom kernels and
ask that their customers do this as well to run landlock protected
programs.

It should not cause any negative impact and will only potentially improve
the security of applications in Debian.

Thanks,

Brad
Virginia Tech

Thread

Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 12:40 +0100
  Bug#999551: Support Landlock by default in Debian kernels Yves-Alexis Perez <corsac@debian.org> - 2021-11-12 13:40 +0100
    Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 15:00 +0100
  Processed: Re: Bug#999551: Support Landlock by default in Debian  kernels "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-11-12 14:00 +0100
  Bug#999551: Support Landlock by default in Debian kernels Bastian Blank <waldi@debian.org> - 2021-11-12 14:00 +0100
    Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 14:50 +0100
  Bug#999551: Support Landlock by default in Debian kernels Brad Tilley <brad@vt.edu> - 2022-03-30 13:50 +0200
  Bug#999551: marked as done (Support Landlock by default in Debian  kernels) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-08-02 20:10 +0200
  Bug#999551: marked as done (Support Landlock by default in Debian  kernels) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2022-08-11 08:10 +0200

csiph-web