# git rev-parse -q --verify 17ae69aba89dbfa2139b7f8024b757ab3cc42f59^{commit}
# git fetch -q -n -f git://fs.ozlabs.ibm.com/kernel/linus master
warning: The last gc run reported the following. Please correct the root cause
and remove .git/gc.log.
Automatic cleanup will not be performed until the file is removed.

warning: There are too many unreachable loose objects; run 'git prune' to remove them.

# git rev-parse -q --verify 17ae69aba89dbfa2139b7f8024b757ab3cc42f59^{commit}
17ae69aba89dbfa2139b7f8024b757ab3cc42f59
# git checkout -q -f -B kisskb 17ae69aba89dbfa2139b7f8024b757ab3cc42f59
# git clean -qxdf
# < git log -1
# commit 17ae69aba89dbfa2139b7f8024b757ab3cc42f59
# Merge: e6f0bf09f066 3532b0b4352c
# Author: Linus Torvalds <torvalds@linux-foundation.org>
# Date:   Sat May 1 18:50:44 2021 -0700
# 
#     Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
#     
#     Pull Landlock LSM from James Morris:
#      "Add Landlock, a new LSM from Mickaël Salaün.
#     
#       Briefly, Landlock provides for unprivileged application sandboxing.
#     
#       From Mickaël's cover letter:
#         "The goal of Landlock is to enable to restrict ambient rights (e.g.
#          global filesystem access) for a set of processes. Because Landlock
#          is a stackable LSM [1], it makes possible to create safe security
#          sandboxes as new security layers in addition to the existing
#          system-wide access-controls. This kind of sandbox is expected to
#          help mitigate the security impact of bugs or unexpected/malicious
#          behaviors in user-space applications. Landlock empowers any
#          process, including unprivileged ones, to securely restrict
#          themselves.
#     
#          Landlock is inspired by seccomp-bpf but instead of filtering
#          syscalls and their raw arguments, a Landlock rule can restrict the
#          use of kernel objects like file hierarchies, according to the
#          kernel semantic. Landlock also takes inspiration from other OS
#          sandbox mechanisms: XNU Sandbox, FreeBSD Capsicum or OpenBSD
#          Pledge/Unveil.
#     
#          In this current form, Landlock misses some access-control features.
#          This enables to minimize this patch series and ease review. This
#          series still addresses multiple use cases, especially with the
#          combined use of seccomp-bpf: applications with built-in sandboxing,
#          init systems, security sandbox tools and security-oriented APIs [2]"
#     
#       The cover letter and v34 posting is here:
#     
#           https://lore.kernel.org/linux-security-module/20210422154123.13086-1-mic@digikod.net/
#     
#       See also:
#     
#           https://landlock.io/
#     
#       This code has had extensive design discussion and review over several
#       years"
#     
#     Link: https://lore.kernel.org/lkml/50db058a-7dde-441b-a7f9-f6837fe8b69f@schaufler-ca.com/ [1]
#     Link: https://lore.kernel.org/lkml/f646e1c7-33cf-333f-070c-0a40ad0468cd@digikod.net/ [2]
#     
#     * tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:
#       landlock: Enable user space to infer supported features
#       landlock: Add user and kernel documentation
#       samples/landlock: Add a sandbox manager example
#       selftests/landlock: Add user space tests
#       landlock: Add syscall implementations
#       arch: Wire up Landlock syscalls
#       fs,security: Add sb_delete hook
#       landlock: Support filesystem access-control
#       LSM: Infrastructure management of the superblock
#       landlock: Add ptrace restrictions
#       landlock: Set up the security framework and manage credentials
#       landlock: Add ruleset and domain management
#       landlock: Add object management
# < /opt/cross/kisskb/korg/gcc-9.2.0-nolibc/powerpc64-linux/bin/powerpc64-linux-gcc --version
# < /opt/cross/kisskb/korg/gcc-9.2.0-nolibc/powerpc64-linux/bin/powerpc64-linux-ld --version
# < git log --format=%s --max-count=1 17ae69aba89dbfa2139b7f8024b757ab3cc42f59
# < make -s -j 120 ARCH=powerpc O=/kisskb/build/linus-rand_powerpc-randconfig_powerpc-gcc9 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-9.2.0-nolibc/powerpc64-linux/bin/powerpc64-linux-  randconfig
# Added to kconfig CONFIG_STANDALONE=y
# Added to kconfig CONFIG_BUILD_DOCSRC=n
# Added to kconfig CONFIG_MODULE_SIG=n
# Added to kconfig CONFIG_CPU_BIG_ENDIAN=y
# Added to kconfig CONFIG_PPC64=y
# Added to kconfig CONFIG_PPC_DISABLE_WERROR=y
# Added to kconfig CONFIG_SECTION_MISMATCH_WARN_ONLY=y
# Added to kconfig CONFIG_PREVENT_FIRMWARE_BUILD=y
# Added to kconfig CONFIG_CC_STACKPROTECTOR_STRONG=n
# Added to kconfig CONFIG_GCC_PLUGINS=n
# Added to kconfig CONFIG_LD_HEAD_STUB_CATCH=y
# Added to kconfig CONFIG_TRIM_UNUSED_KSYMS=n
# Added to kconfig CONFIG_UBSAN=n
# < make -s -j 120 ARCH=powerpc O=/kisskb/build/linus-rand_powerpc-randconfig_powerpc-gcc9 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-9.2.0-nolibc/powerpc64-linux/bin/powerpc64-linux-  help
# make -s -j 120 ARCH=powerpc O=/kisskb/build/linus-rand_powerpc-randconfig_powerpc-gcc9 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-9.2.0-nolibc/powerpc64-linux/bin/powerpc64-linux-  olddefconfig
.config:5347:warning: override: reassigning to symbol PPC64
.config:5350:warning: override: reassigning to symbol PREVENT_FIRMWARE_BUILD
.config:5355:warning: override: reassigning to symbol UBSAN
# make -s -j 120 ARCH=powerpc O=/kisskb/build/linus-rand_powerpc-randconfig_powerpc-gcc9 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-9.2.0-nolibc/powerpc64-linux/bin/powerpc64-linux-  
Completed OK
# rm -rf /kisskb/build/linus-rand_powerpc-randconfig_powerpc-gcc9
# Build took: 0:03:26.416715