• Linus Torvalds's avatar
    Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security · 17ae69ab
    Linus Torvalds authored
    Pull Landlock LSM from James Morris:
     "Add Landlock, a new LSM from Mickaël Salaün.
    
      Briefly, Landlock provides for unprivileged application sandboxing.
    
      From Mickaël's cover letter:
        "The goal of Landlock is to enable to restrict ambient rights (e.g.
         global filesystem access) for a set of processes. Because Landlock
         is a stackable LSM [1], it makes possible to create safe security
         sandboxes as new security layers in addition to the existing
         system-wide access-controls. This kind of sandbox is expected to
         help mitigate the security impact of bugs or unexpected/malicious
         behaviors in user-space applications. Landlock empowers any
         process, including unprivileged ones, to securely restrict
         themselves.
    
         Landlock is inspired by seccomp-bpf but instead of filtering
         syscalls and their raw arguments, a Landlock rule can restrict the
         use of kernel objects like file hierarchies, according to the
         kernel semantic. Landlock also takes inspiration from other OS
         sandbox mechanisms: XNU Sandbox, FreeBSD Capsicum or OpenBSD
         Pledge/Unveil.
    
         In this current form, Landlock misses some access-control features.
         This enables to minimize this patch series and ease review. This
         series still addresses multiple use cases, especially with the
         combined use of seccomp-bpf: applications with built-in sandboxing,
         init systems, security sandbox tools and security-oriented APIs [2]"
    
      The cover letter and v34 posting is here:
    
          https://lore.kernel.org/linux-security-module/20210422154123.13086-1-mic@digikod.net/
    
      See also:
    
          https://landlock.io/
    
      This code has had extensive design discussion and review over several
      years"
    
    Link: https://lore.kernel.org/lkml/50db058a-7dde-441b-a7f9-f6837fe8b69f@schaufler-ca.com/ [1]
    Link: https://lore.kernel.org/lkml/f646e1c7-33cf-333f-070c-0a40ad0468cd@digikod.net/ [2]
    
    * tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:
      landlock: Enable user space to infer supported features
      landlock: Add user and kernel documentation
      samples/landlock: Add a sandbox manager example
      selftests/landlock: Add user space tests
      landlock: Add syscall implementations
      arch: Wire up Landlock syscalls
      fs,security: Add sb_delete hook
      landlock: Support filesystem access-control
      LSM: Infrastructure management of the superblock
      landlock: Add ptrace restrictions
      landlock: Set up the security framework and manage credentials
      landlock: Add ruleset and domain management
      landlock: Add object management
    17ae69ab
syscall.tbl 16.5 KB