Re: [PATCH v22 0/8] Script execution control (was O_MAYEXEC)

[Mickaël Salaün]

On Thu, Dec 05, 2024 at 05:09:17PM +0100, Mickaël Salaün wrote:
> Hi,
> 
> The goal of this patch series is to be able to ensure that direct file
> execution (e.g. ./script.sh) and indirect file execution (e.g. sh
> script.sh) lead to the same result, especially from a security point of
> view.
> 
> The main changes from the previous version are the IMA patch to properly
> log access check requests with audit, removal of audit change, an
> extended documentation for tailored distros, a rebase on v6.13-rc1, and
> some minor cosmetic changes.
> 
> The current status is summarized in this article:
> https://lwn.net/Articles/982085/
> I also gave a talk at LPC last month:
> https://lpc.events/event/18/contributions/1692/
> And here is a proof of concept for Python (for now, for the previous
> version: v19): https://github.com/zooba/spython/pull/12
> 
> Kees, would you like to take this series in your tree?

> 
> Previous versions
> -----------------
> 

v21: https://lore.kernel.org/r/20241112191858.162021-1-mic@xxxxxxxxxxx

> v20: https://lore.kernel.org/r/20241011184422.977903-1-mic@xxxxxxxxxxx
> v19: https://lore.kernel.org/r/20240704190137.696169-1-mic@xxxxxxxxxxx
> v18: https://lore.kernel.org/r/20220104155024.48023-1-mic@xxxxxxxxxxx
> v17: https://lore.kernel.org/r/20211115185304.198460-1-mic@xxxxxxxxxxx
> v16: https://lore.kernel.org/r/20211110190626.257017-1-mic@xxxxxxxxxxx
> v15: https://lore.kernel.org/r/20211012192410.2356090-1-mic@xxxxxxxxxxx
> v14: https://lore.kernel.org/r/20211008104840.1733385-1-mic@xxxxxxxxxxx
> v13: https://lore.kernel.org/r/20211007182321.872075-1-mic@xxxxxxxxxxx
> v12: https://lore.kernel.org/r/20201203173118.379271-1-mic@xxxxxxxxxxx
> v11: https://lore.kernel.org/r/20201019164932.1430614-1-mic@xxxxxxxxxxx
> v10: https://lore.kernel.org/r/20200924153228.387737-1-mic@xxxxxxxxxxx
> v9: https://lore.kernel.org/r/20200910164612.114215-1-mic@xxxxxxxxxxx
> v8: https://lore.kernel.org/r/20200908075956.1069018-1-mic@xxxxxxxxxxx
> v7: https://lore.kernel.org/r/20200723171227.446711-1-mic@xxxxxxxxxxx
> v6: https://lore.kernel.org/r/20200714181638.45751-1-mic@xxxxxxxxxxx
> v5: https://lore.kernel.org/r/20200505153156.925111-1-mic@xxxxxxxxxxx
> v4: https://lore.kernel.org/r/20200430132320.699508-1-mic@xxxxxxxxxxx
> v3: https://lore.kernel.org/r/20200428175129.634352-1-mic@xxxxxxxxxxx
> v2: https://lore.kernel.org/r/20190906152455.22757-1-mic@xxxxxxxxxxx
> v1: https://lore.kernel.org/r/20181212081712.32347-1-mic@xxxxxxxxxxx