Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1081269

Bug#999551: Support Landlock by default in Debian kernels

Cross-posted to 2 groups.

Show all headers | View raw

On 12/11/2021 13:34, Yves-Alexis Perez wrote:
> Hey Mickaël, kernel team,
> 
> On Fri, 2021-11-12 at 12:23 +0100, Mickaël Salaün wrote:
>> -
>> CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack
>> ,to
>> moyo"
>> +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,apparmor,sel
>> in
>> ux,smack,tomoyo"
> 
> At first sight the change looks reasonable, but just to check: right now there
> is there is no userland stuff using Landlock LSM packaged in Debian? So
> nothing is currently broken by not having the above, it's just more practical
> when testing or using the feature?
> 
> (not saying we shouldn't enable it, it's just so we know what exactly we gain
> or not).

Applications using Landlock should not break if the feature is not
supported by the running kernel (best-effort security). Whether some
Debian packaged applications are using Landlock or not doesn't seem
important since users can download and run their own applications, right?

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 12:40 +0100
  Bug#999551: Support Landlock by default in Debian kernels Yves-Alexis Perez <corsac@debian.org> - 2021-11-12 13:40 +0100
    Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 15:00 +0100
  Bug#999551: Support Landlock by default in Debian kernels Bastian Blank <waldi@debian.org> - 2021-11-12 14:00 +0100
    Bug#999551: Support Landlock by default in Debian kernels Mickaël Salaün <mic@digikod.net> - 2021-11-12 14:50 +0100

csiph-web