- rsbac-commit - rsbac.org

linux-6.1.y 6.1.107 commit beb06c2b040d With "Hide filesystem objects", hide in all places where CAP FD hid
by Amon Ott 03 Sep '24

03 Sep '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.107 commit beb06c2b040d79a1f7a7935c8e18e2a318befc09 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Sep 3 13:08:15 2024 +0200 With "Hide filesystem objects", hide in all places where CAP FD hiding does. CONFIG_RSBAC_FSOBJ_HIDE hides based on SEARCH right, this means extra SEARCH requests for all covered items. fs/ceph/dir.c | 38 +++++++++++++++++- fs/locks.c | 22 +++++++++++ fs/open.c | 124 ++++++++++++++++++++++++++++++++++++++++++++++------------ 3 files changed, 157 insertions(+), 27 deletions(-)

1 0

linux-6.6.y 6.6.48 commit c1568c07a1da With "Hide filesystem objects", hide in all places where CAP FD hid
by Amon Ott 03 Sep '24

03 Sep '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.6.y.git;a=summary RSBAC for Linux 6.6 (Long Term) Current version: 6.6.48 commit c1568c07a1da5e605cd84406da5ef8c493a54d33 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Sep 3 10:07:49 2024 +0200 With "Hide filesystem objects", hide in all places where CAP FD hiding does. CONFIG_RSBAC_FSOBJ_HIDE hides based on SEARCH right, this means extra SEARCH requests for all covered items. fs/ceph/dir.c | 38 +++++++++++++++++- fs/locks.c | 22 +++++++++++ fs/open.c | 124 ++++++++++++++++++++++++++++++++++++++++++++++------------ 3 files changed, 157 insertions(+), 27 deletions(-)

1 0

linux-6.1.y 6.1.107 commit 0d5ec68c4e25 Port CAP fd hiding in ceph_readdir() from 6.6. Change rsbac_cap_hid
by Amon Ott 30 Aug '24

30 Aug '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.107 commit 0d5ec68c4e25ce8743ff9a9088283b30d14fbbfe Author: Amon Ott <ao(a)rsbac.org> Date: Thu Aug 22 12:46:51 2024 +0200 Port CAP fd hiding in ceph_readdir() from 6.6. Change rsbac_cap_hide_fd() arg type from "struct dentry *" to "struct inode *". ceph_readdir(): add rsbac_cap_hide_fd() call with custom inode struct. ceph_readdir(): add rsbac_cap_hide_fd() call to __dcache_readdir(), too. For module builds, also export symbols rsbac_cap_fd_hiding, rsbac_cap_hide_fd. fs/ceph/dir.c | 35 +++++++++++++++++++++++++++++++++++ fs/locks.c | 4 ++-- fs/namei.c | 10 +++++----- fs/open.c | 10 +++++----- fs/stat.c | 4 ++-- include/rsbac/adf.h | 4 ++-- rsbac/help/debug.c | 3 ++- rsbac/help/helpers.c | 32 ++++++++++++-------------------- 8 files changed, 65 insertions(+), 37 deletions(-)

1 0

linux-6.6.y 6.6.48 commit f7910ad60f76 ceph_readdir(): add rsbac_cap_hide_fd() call to __dcache_readdir(),
by Amon Ott 30 Aug '24

30 Aug '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.6.y.git;a=summary RSBAC for Linux 6.6 (Long Term) Current version: 6.6.48 commit f7910ad60f765bfc795d964d8f80ae915f66b4e4 Author: Amon Ott <ao(a)rsbac.org> Date: Thu Aug 22 12:31:05 2024 +0200 ceph_readdir(): add rsbac_cap_hide_fd() call to __dcache_readdir(), too. For module builds, also export symbols rsbac_cap_fd_hiding, rsbac_cap_hide_fd. fs/ceph/dir.c | 9 +++++++++ rsbac/help/debug.c | 3 ++- rsbac/help/helpers.c | 3 ++- 3 files changed, 13 insertions(+), 2 deletions(-)

1 0

linux-5.10.y 5.10.224 commit 84a1eaa56b2c Port CAP fd hiding in ceph_readdir() from 6.6. Change rsbac_cap_hid
by Amon Ott 22 Aug '24

22 Aug '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.10.y.git;a=summary RSBAC for Linux 5.10 (Long Term) Current version: 5.10.224 commit 84a1eaa56b2c2d4d3f5ee1e9bcd31a8832056e52 Author: Amon Ott <ao(a)rsbac.org> Date: Thu Aug 22 12:55:05 2024 +0200 Port CAP fd hiding in ceph_readdir() from 6.6. Change rsbac_cap_hide_fd() arg type from "struct dentry *" to "struct inode *". ceph_readdir(): add rsbac_cap_hide_fd() call with custom inode struct. ceph_readdir(): add rsbac_cap_hide_fd() call to __dcache_readdir(), too. For module builds, also export symbols rsbac_cap_fd_hiding, rsbac_cap_hide_fd. fs/ceph/dir.c | 35 +++++++++++++++++++++++++++++++++++ fs/locks.c | 4 ++-- fs/namei.c | 10 +++++----- fs/open.c | 10 +++++----- fs/stat.c | 4 ++-- include/rsbac/adf.h | 4 ++-- rsbac/help/debug.c | 3 ++- rsbac/help/helpers.c | 32 ++++++++++++-------------------- 8 files changed, 65 insertions(+), 37 deletions(-)

1 0

linux-5.15.y 5.15.165 commit ccf3dbcc7c5c Port CAP fd hiding in ceph_readdir() from 6.6. Change rsbac_cap_hid
by Amon Ott 22 Aug '24

22 Aug '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.165 commit ccf3dbcc7c5cb93240bce7fed771ff38938235cd Author: Amon Ott <ao(a)rsbac.org> Date: Thu Aug 22 12:49:29 2024 +0200 Port CAP fd hiding in ceph_readdir() from 6.6. Change rsbac_cap_hide_fd() arg type from "struct dentry *" to "struct inode *". ceph_readdir(): add rsbac_cap_hide_fd() call with custom inode struct. ceph_readdir(): add rsbac_cap_hide_fd() call to __dcache_readdir(), too. For module builds, also export symbols rsbac_cap_fd_hiding, rsbac_cap_hide_fd. fs/ceph/dir.c | 35 +++++++++++++++++++++++++++++++++++ fs/locks.c | 4 ++-- fs/namei.c | 10 +++++----- fs/open.c | 10 +++++----- fs/stat.c | 4 ++-- include/rsbac/adf.h | 4 ++-- rsbac/help/debug.c | 3 ++- rsbac/help/helpers.c | 39 ++++++++++++++++++++------------------- 8 files changed, 73 insertions(+), 36 deletions(-)

1 0

linux-6.1.y 6.1.106 commit a557cb6a5c1a Port CAP fd hiding in ceph_readdir() from 6.6. Change rsbac_cap_hid
by Amon Ott 22 Aug '24

22 Aug '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.106 commit a557cb6a5c1a9fc54d441ec28c7c10acb4a1fc3c Author: Amon Ott <ao(a)rsbac.org> Date: Thu Aug 22 12:46:51 2024 +0200 Port CAP fd hiding in ceph_readdir() from 6.6. Change rsbac_cap_hide_fd() arg type from "struct dentry *" to "struct inode *". ceph_readdir(): add rsbac_cap_hide_fd() call with custom inode struct. ceph_readdir(): add rsbac_cap_hide_fd() call to __dcache_readdir(), too. For module builds, also export symbols rsbac_cap_fd_hiding, rsbac_cap_hide_fd. fs/ceph/dir.c | 35 +++++++++++++++++++++++++++++++++++ fs/locks.c | 4 ++-- fs/namei.c | 10 +++++----- fs/open.c | 10 +++++----- fs/stat.c | 4 ++-- include/rsbac/adf.h | 4 ++-- rsbac/help/debug.c | 3 ++- rsbac/help/helpers.c | 32 ++++++++++++-------------------- 8 files changed, 65 insertions(+), 37 deletions(-)

1 0

linux-6.6.y 6.6.47 commit 726e39471a62 ceph_readdir(): add rsbac_cap_hide_fd() call to __dcache_readdir(),
by Amon Ott 22 Aug '24

22 Aug '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.6.y.git;a=summary RSBAC for Linux 6.6 (Long Term) Current version: 6.6.47 commit 726e39471a6235d1c0f2c3526dd915e50cbd6169 Author: Amon Ott <ao(a)rsbac.org> Date: Thu Aug 22 12:31:05 2024 +0200 ceph_readdir(): add rsbac_cap_hide_fd() call to __dcache_readdir(), too. For module builds, also export symbols rsbac_cap_fd_hiding, rsbac_cap_hide_fd. fs/ceph/dir.c | 9 +++++++++ rsbac/help/debug.c | 3 ++- rsbac/help/helpers.c | 3 ++- 3 files changed, 13 insertions(+), 2 deletions(-)

1 0

linux-6.6.y 6.6.47 commit 21a0baed27cb ceph_readdir(): add rsbac_cap_hide_fd() call with custom inode stru
by Amon Ott 22 Aug '24

22 Aug '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.6.y.git;a=summary RSBAC for Linux 6.6 (Long Term) Current version: 6.6.47 commit 21a0baed27cb343220b5ecfd85420a492d60b424 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Aug 21 15:59:23 2024 +0200 ceph_readdir(): add rsbac_cap_hide_fd() call with custom inode struct. fs/ceph/dir.c | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+)

1 0

linux-5.10.y 5.10.224 commit 45ecf0f294ef CAP fd hiding: special case for CephFS, call its own permission() f
by Amon Ott 21 Aug '24

21 Aug '24

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.10.y.git;a=summary RSBAC for Linux 5.10 (Long Term) Current version: 5.10.224 commit 45ecf0f294ef81bc2df3fe6bd8b0efbd72ad0d4f Author: Amon Ott <ao(a)rsbac.org> Date: Wed Aug 21 13:16:50 2024 +0200 CAP fd hiding: special case for CephFS, call its own permission() function. rsbac/help/helpers.c | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-)

1 0

2025

2024

2023

2022

rsbac-commit