Re: [PATCH v2] cred: prevent slab cache merging for cred_jar
From: Paul Moore
Date: Wed Sep 09 2026 - 17:56:53 EST
On Jun 11, 2026 Mohammed EL Kadiri <med08elkadiri@xxxxxxxxx> wrote:
>
> Add SLAB_NO_MERGE to cred_jar to ensure struct cred objects get
> dedicated slab pages, preventing the allocator from merging this
> cache with other similarly-sized caches. This is a hardening measure
> to provide type isolation for credential objects.
>
> Reviewed-by: Kees Cook <kees@xxxxxxxxxx>
> Signed-off-by: Mohammed EL Kadiri <med08elkadiri@xxxxxxxxx>
> ---
> Changes in v2:
> - Collected Reviewed-by tag from Kees Cook.
> - No code changes from v1.
>
> kernel/cred.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
Merged into lsm/dev, thanks!
--
paul-moore.com