Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1081252

Bug#999551: Support Landlock by default in Debian kernels

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Package: src:linux
Version: 5.14.16-1
Severity: normal
Tags: patch
X-Debbugs-Cc: landlock@lists.linux.dev

Hi,

The Landlock security feature is built in Debian kernel since
5.13.12-1~exp1 which is great!  However, it is not enough to enable the
CONFIG_SECURITY_LANDLOCK option as described in the related help.  The
CONFIG_LSM option needs to be prepended by "landlock," to make Landlock
system calls available without modifying the kernel boot arguments.

Could you please apply the attached patch to make this feature more
broadly available?

This can be validated with the tests provided by the kernel sources:

fakeroot make -C tools/testing/selftests TARGETS=landlock gen_tar
tar -xf
tools/testing/selftests/kselftest_install/kselftest-packages/kselftest.tar.gz
# as root:
./run_kselftest.sh

If Yama is enabled, half of the ptrace tests may failed, which is OK.

Regards,
 Mickaël

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 12:40 +0100
  Bug#999551: Support Landlock by default in Debian kernels Yves-Alexis Perez <corsac@debian.org> - 2021-11-12 13:40 +0100
    Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 15:00 +0100
  Bug#999551: Support Landlock by default in Debian kernels Bastian Blank <waldi@debian.org> - 2021-11-12 14:00 +0100
    Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 14:50 +0100

csiph-web