# git rev-parse -q --verify 17ae69aba89dbfa2139b7f8024b757ab3cc42f59^{commit}
17ae69aba89dbfa2139b7f8024b757ab3cc42f59
already have revision, skipping fetch
# git checkout -q -f -B kisskb 17ae69aba89dbfa2139b7f8024b757ab3cc42f59
# git clean -qxdf
# < git log -1
# commit 17ae69aba89dbfa2139b7f8024b757ab3cc42f59
# Merge: e6f0bf09f066 3532b0b4352c
# Author: Linus Torvalds <torvalds@linux-foundation.org>
# Date:   Sat May 1 18:50:44 2021 -0700
# 
#     Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
#     
#     Pull Landlock LSM from James Morris:
#      "Add Landlock, a new LSM from Mickaël Salaün.
#     
#       Briefly, Landlock provides for unprivileged application sandboxing.
#     
#       From Mickaël's cover letter:
#         "The goal of Landlock is to enable to restrict ambient rights (e.g.
#          global filesystem access) for a set of processes. Because Landlock
#          is a stackable LSM [1], it makes possible to create safe security
#          sandboxes as new security layers in addition to the existing
#          system-wide access-controls. This kind of sandbox is expected to
#          help mitigate the security impact of bugs or unexpected/malicious
#          behaviors in user-space applications. Landlock empowers any
#          process, including unprivileged ones, to securely restrict
#          themselves.
#     
#          Landlock is inspired by seccomp-bpf but instead of filtering
#          syscalls and their raw arguments, a Landlock rule can restrict the
#          use of kernel objects like file hierarchies, according to the
#          kernel semantic. Landlock also takes inspiration from other OS
#          sandbox mechanisms: XNU Sandbox, FreeBSD Capsicum or OpenBSD
#          Pledge/Unveil.
#     
#          In this current form, Landlock misses some access-control features.
#          This enables to minimize this patch series and ease review. This
#          series still addresses multiple use cases, especially with the
#          combined use of seccomp-bpf: applications with built-in sandboxing,
#          init systems, security sandbox tools and security-oriented APIs [2]"
#     
#       The cover letter and v34 posting is here:
#     
#           https://lore.kernel.org/linux-security-module/20210422154123.13086-1-mic@digikod.net/
#     
#       See also:
#     
#           https://landlock.io/
#     
#       This code has had extensive design discussion and review over several
#       years"
#     
#     Link: https://lore.kernel.org/lkml/50db058a-7dde-441b-a7f9-f6837fe8b69f@schaufler-ca.com/ [1]
#     Link: https://lore.kernel.org/lkml/f646e1c7-33cf-333f-070c-0a40ad0468cd@digikod.net/ [2]
#     
#     * tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:
#       landlock: Enable user space to infer supported features
#       landlock: Add user and kernel documentation
#       samples/landlock: Add a sandbox manager example
#       selftests/landlock: Add user space tests
#       landlock: Add syscall implementations
#       arch: Wire up Landlock syscalls
#       fs,security: Add sb_delete hook
#       landlock: Support filesystem access-control
#       LSM: Infrastructure management of the superblock
#       landlock: Add ptrace restrictions
#       landlock: Set up the security framework and manage credentials
#       landlock: Add ruleset and domain management
#       landlock: Add object management
# < /opt/cross/kisskb/korg/gcc-4.9.4-nolibc/arm-linux-gnueabi/bin/arm-linux-gnueabi-gcc --version
# < /opt/cross/kisskb/korg/gcc-4.9.4-nolibc/arm-linux-gnueabi/bin/arm-linux-gnueabi-ld --version
# < git log --format=%s --max-count=1 17ae69aba89dbfa2139b7f8024b757ab3cc42f59
# < make -s -j 120 ARCH=arm O=/kisskb/build/linus_mainstone_defconfig_arm-gcc4.9 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-4.9.4-nolibc/arm-linux-gnueabi/bin/arm-linux-gnueabi-  mainstone_defconfig
# < make -s -j 120 ARCH=arm O=/kisskb/build/linus_mainstone_defconfig_arm-gcc4.9 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-4.9.4-nolibc/arm-linux-gnueabi/bin/arm-linux-gnueabi-  help
# make -s -j 120 ARCH=arm O=/kisskb/build/linus_mainstone_defconfig_arm-gcc4.9 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-4.9.4-nolibc/arm-linux-gnueabi/bin/arm-linux-gnueabi-  olddefconfig
# make -s -j 120 ARCH=arm O=/kisskb/build/linus_mainstone_defconfig_arm-gcc4.9 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-4.9.4-nolibc/arm-linux-gnueabi/bin/arm-linux-gnueabi-  
Completed OK
# rm -rf /kisskb/build/linus_mainstone_defconfig_arm-gcc4.9
# Build took: 0:00:30.953987