OLS2008: Time to Glean - Mac for Linux history and the future
1 like1,020 views
The document discusses analyzing the history of Linux mandatory access control (MAC) by examining messages posted to the LSM mailing list from December 2003 to June 2008. It finds that: - 6545 messages were posted across 978 threads in that period, contained in a 55MB mbox file. - Monthly message volume peaked in April 2006, June 2007, and October 2007, driven by discussions on new MAC modules like AppArmor and TOMOYO Linux. - The major contributors to discussions were developers of MAC modules like AppArmor, Smack, and TOMOYO Linux. - Analyzing the mailing list archive provides insights into the evolution of Linux MAC and interests around new security models over that
![(1) April 2006
[RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) Torok Edwin
[RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones
RE: [ANNOUNCE] Release Digsig 1.5: kernel module for run-timeauthentication of binaries Makan Pourzandi
[ANNOUNCE] Release Digsig 1.5: kernel module for run-time authentication of binaries Makan Pourzandi
[ANNOUNCE] ISSI is porting PitBull Foundation and LX to Linux using the LSM Mikel L. Matthews
[2.6 patch] remove the Root Plug Support sample module Adrian Bunk
using lsm hook to implement transparent file crypt hu jun
RE: [ANNOUNCE] Release Digsig 1.5: kernel module forrun-timeauthentication of binaries Makan Pourzandi
Re: [PATCH] fix up security_socket_getpeersec_* documentation Xiaolan Zhang
about security and trust of linux in engineering information system hu jun
A transparent secure architecture for special applications hu jun](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-22-320.jpg)
![(1) April 2006
0%
0%
1%0%
0%
1%
2%2%
5%
52%
[RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) Torok Edwin
[RFC][PATCH 0/11] security: AppArmor - Overview Tony 36% Jones
RE: [ANNOUNCE] Release Digsig 1.5: kernel module for run-timeauthentication of binaries Makan Pourzandi
[ANNOUNCE] Release Digsig 1.5: kernel module for run-time authentication of binaries Makan Pourzandi
[ANNOUNCE] ISSI is porting PitBull Foundation and LX to Linux using the LSM Mikel L. Matthews
[2.6 patch] remove the Root Plug Support sample module Adrian Bunk
using lsm hook to implement transparent file crypt hu jun
RE: [ANNOUNCE] Release Digsig 1.5: kernel module forrun-timeauthentication of binaries Makan Pourzandi
Re: [PATCH] fix up security_socket_getpeersec_* documentation Xiaolan Zhang
about security and trust of linux in engineering information system hu jun
A transparent secure architecture for special applications hu jun](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-23-320.jpg)
![(2) June 2007
[AppArmor 00/45] AppArmor security module overview John Johansen
[AppArmor 00/44] AppArmor security module overview John Johansen
Re: implement-file-posix-capabilities.patch Serge E. Hallyn
[RFC] TOMOYO Linux Toshiharu Harada
[TOMOYO 0/9] TOMOYO Linux security module. Kentaro Takeda
[RFD 0/4] AppArmor - Don't pass NULL nameidata to vfs_create/lookup/permission IOPs John Johansen
What kind of feature does New LSM security model need? Kazuki Omo
[PATCH 1/1] file caps: update selinux xattr hooks Serge E. Hallyn
Re: [TOMOYO 5/9] Memory and pathname management functions. Albert Cahalan
[PATCH 1/1] file capabilities: get_file_caps cleanups Serge E. Hallyn
[RFC][Patch 1/1] IBAC Patch Mimi Zohar
[PATCH] [RFC] security: add hook inode_post_removexattr Hawk Xu
[PATCH 1/1] file capabilities: introduce cap_setfcap Serge E. Hallyn
Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook Pavel Machek
Re: implement-file-posix-capabilities.patch Serge E. Hallyn](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-24-320.jpg)
![(2) June 2007
1%1% 0%
0%
0%
0%
1% 1%
2%
3%
4%
4%
[AppArmor 00/45] AppArmor security module overview John Johansen
[AppArmor 00/44] AppArmor security module overview John Johansen
Re: implement-file-posix-capabilities.patch Serge E. Hallyn14% 52%
[RFC] TOMOYO Linux Toshiharu Harada
[TOMOYO 0/9] TOMOYO Linux security module. Kentaro Takeda
[RFD 0/4] AppArmor - Don't pass NULL nameidata to vfs_create/lookup/permission IOPs John Johansen
What kind of feature does New LSM security model need? Kazuki Omo
[PATCH 1/1] file caps: update selinux xattr hooks Serge E. Hallyn
Re: [TOMOYO 5/9] Memory and pathname management functions. 17% Cahalan
Albert
[PATCH 1/1] file capabilities: get_file_caps cleanups Serge E. Hallyn
[RFC][Patch 1/1] IBAC Patch Mimi Zohar
[PATCH] [RFC] security: add hook inode_post_removexattr Hawk Xu
[PATCH 1/1] file capabilities: introduce cap_setfcap Serge E. Hallyn
Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook Pavel Machek
Re: implement-file-posix-capabilities.patch Serge E. Hallyn](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-25-320.jpg)
![(3) October 2007
Linux Security *Module* Framework (Was: LSM conversion to static interface Simon Arlott
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler
[AppArmor 00/45] AppArmor security module overview John Johansen
[TOMOYO 00/15](repost) TOMOYO Linux - MAC based on process invocation history. Kentaro Takeda
Re: Linux Security *Module* Framework (Was: LSM conversion to static interface) Rob Meijer
[RFC 0/2] getsecurity/vfs_getxattr cleanup Daved P. Quigley
Re: LSM conversion to static interface Thomas Fricaccia
[PATCH] Version 4 (2.6.23-rc8-mm2) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler
[TOMOYO #4 00/13] TOMOYO Linux - MAC based on process invocation history. Tetsuo Handa
[PATCH 1/2 -mm] capabilities: clean up file capability reading Serge E. Hallyn](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-26-320.jpg)
![(3) October 2007
3%
3%
4%
22%
5%
5%
8%
Linux Security *Module* Framework (Was: LSM conversion to static interface Simon Arlott
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler
20%
[AppArmor 00/45] AppArmor security module overview John Johansen
[TOMOYO 00/15](repost) TOMOYO Linux - MAC based on process invocation history. Kentaro Takeda
13%
Re: Linux Security *Module* Framework (Was: LSM conversion to static interface) Rob Meijer
[RFC 0/2] getsecurity/vfs_getxattr cleanup Daved P. Quigley
Re: LSM conversion to static interface Thomas Fricaccia 17%
[PATCH] Version 4 (2.6.23-rc8-mm2) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler
[TOMOYO #4 00/13] TOMOYO Linux - MAC based on process invocation history. Tetsuo Handa
[PATCH 1/2 -mm] capabilities: clean up file capability reading Serge E. Hallyn](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-27-320.jpg)
![Long lived threads 10
82
70
59
57
55
days 54
50
49
44
42
0 30 60 90
[PATCH 0/3] exporting capability name/code pairs (final#2)
[PATCH] capabilities: implement per-process securebits
[PATCH] Implement file posix capabilities
[PATCH 2/2-v2] NFS: use new LSM interfaces to explicitly set mount options
AppArmor FAQ
Mediating send_sigurg
[PATCH 00/28] Permit filesystem local caching [try #2]
[AppArmor 00/41] AppArmor security module overview
[AppArmor 00/45] AppArmor security module overview
[PATCH 1/1] security: introduce fs caps](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-48-320.jpg)
![Long lived threads 20
subject from start end days people messages
[PATCH 0/3] exporting capability name/code pairs (final#2) KaiGai Kohei 2008/02/24 2008/05/15 82 7 32
[PATCH] capabilities: implement per-process securebits Andrew G. Morgan 2008/02/18 2008/04/27 70 3 7
[PATCH] Implement file posix capabilities Serge E. Hallyn 2006/11/27 2007/01/24 59 5 9
[PATCH 2/2-v2] NFS: use new LSM interfaces to explicitly set mount optionsParis
Eric 2008/03/05 2008/04/30 57 3 6
AppArmor FAQ John Johansen 2007/04/16 2007/06/09 55 15 48
Mediating send_sigurg Stephen Smalley 2004/08/27 2004/10/19 54 2 12
[PATCH 00/28] Permit filesystem local caching [try #2] David Howells 2007/12/05 2008/01/23 50 8 126
[AppArmor 00/41] AppArmor security module overview John Johansen 2007/04/12 2007/05/30 49 24 176
[AppArmor 00/45] AppArmor security module overview John Johansen 2007/05/14 2007/06/26 44 22 236
[PATCH 1/1] security: introduce fs caps Serge E. Hallyn 2006/11/08 2006/12/19 42 6 30
[PATCH] Updated BSD Secure Levels Patch Michael Halcrow 2003/12/03 2004/01/10 39 2 2
[PATCH 3/7] SLIM main patch Kylene Jo Hall 2006/09/12 2006/10/20 39 3 8
[PATCH] 64 bit capabilities Andrew G. Morgan 2007/11/07 2007/12/13 37 4 19
[RFC] [Stacking v4 3/3] Cleaned up stacker patch Serge E. Hallyn 2004/12/03 2005/01/06 35 3 8
Linux Security *Module* Framework (Was: LSM conversion to static interfaceSimon Arlott 2007/10/24 2007/11/26 34 26 89
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Casey Schaufler
Kernel 2007/09/29 2007/10/30 32 24 81
Problem of attaching a security structer to sock in 2.6.4!! Yuan Chunyang 2004/05/17 2004/06/14 29 6 10
[TOMOYO 00/15] TOMOYO Linux - MAC based on process invocation histroy entaro Takeda
K 2007/08/24 2007/09/21 29 8 37
[PATCH] Smack: Simplified Mandatory Access Control Kernel Casey Schaufler 2007/08/11 2007/09/07 28 11 43](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-49-320.jpg)
![Popular threads 10
34
33
26
24
24
people
22
19
15
14
13
0 10 20 30 40
[RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner)
[RFC][PATCH 0/11] security: AppArmor - Overview
Linux Security *Module* Framework (Was: LSM conversion to static interface
[AppArmor 00/41] AppArmor security module overview
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel
[AppArmor 00/45] AppArmor security module overview
[AppArmor 00/44] AppArmor security module overview
AppArmor FAQ
Re: implement-file-posix-capabilities.patch
Re: Linux Security *Module* Framework (Was: LSM conversion to static interface)](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-51-320.jpg)
![Popular threads 20
subject from start end days people messages
[RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner)
Torok Edwin 2006/04/07 2006/05/03 27 34 244
[RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones 2006/04/19 2006/04/28 10 33 170
Linux Security *Module* Framework (Was: LSM conversion to static interface
Simon Arlott 2007/10/24 2007/11/26 34 26 89
[AppArmor 00/41] AppArmor security module overview John Johansen 2007/04/12 2007/05/30 49 24 176
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access ControlSchaufler
Casey Kernel 2007/09/29 2007/10/30 32 24 81
[AppArmor 00/45] AppArmor security module overview John Johansen 2007/05/14 2007/06/26 44 22 236
[AppArmor 00/44] AppArmor security module overview John Johansen 2007/06/26 2007/07/04 9 19 76
AppArmor FAQ John Johansen 2007/04/16 2007/06/09 55 15 48
Re: implement-file-posix-capabilities.patch Serge E. Hallyn 2007/06/21 2007/07/04 14 14 65
Re: Linux Security *Module* Framework (Was: LSM conversion to static interface)
Rob Meijer 2007/10/29 2007/11/06 9 13 33
[TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa 2008/04/04 2008/04/24 21 12 74
New stacker performance results Serge E. Hallyn 2005/05/18 2005/05/26 9 12 51
[RFC 0/28] Patches to pass vfsmount to LSM inode security hooks Tony Jones 2007/02/05 2007/02/12 8 12 61
RE: [ANNOUNCE] Release Digsig 1.5: kernel module for run-timeauthentication of binaries
Makan Pourzandi 2006/04/24 2006/04/28 5 12 25
[PATCH] Smack: Simplified Mandatory Access Control Kernel Casey Schaufler 2007/08/11 2007/09/07 28 11 43
[TOMOYO 00/15](repost) TOMOYO Linux - MAC based on process invocation history.
Kentaro Takeda 2007/10/02 2007/10/15 14 11 54
[PATCH try #3] security: Convert LSM into a static interface James Morris 2007/07/14 2007/07/24 11 11 27
[patch 00/15] security: pass path instead of inode to security ops Miklos Szeredi 2008/05/29 2008/06/14 17 10 51
[RFC]Introduce generalized hooks for getting and setting inode secctx David P. Quigley 2008/03/05 2008/03/10 6 10 39
[AppArmor 00/45] AppArmor security module overview John Johansen 2007/10/25 2007/10/28 4 10 70](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-52-320.jpg)
![Active threads 10
244
236
176
170
126
messages 89
81
76
74
70
0 50 100 150 200 250
[RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner)
[AppArmor 00/45] AppArmor security module overview
[AppArmor 00/41] AppArmor security module overview
[RFC][PATCH 0/11] security: AppArmor - Overview
[PATCH 00/28] Permit filesystem local caching [try #2]
Linux Security *Module* Framework (Was: LSM conversion to static interface
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel
[AppArmor 00/44] AppArmor security module overview
[TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released
[AppArmor 00/45] AppArmor security module overview](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-57-320.jpg)
![Active threads 20
subject from start end days people messages
[RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner)
Torok Edwin 2006/04/07 2006/05/03 27 34 244
[AppArmor 00/45] AppArmor security module overview John Johansen 2007/05/14 2007/06/26 44 22 236
[AppArmor 00/41] AppArmor security module overview John Johansen 2007/04/12 2007/05/30 49 24 176
[RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones 2006/04/19 2006/04/28 10 33 170
[PATCH 00/28] Permit filesystem local caching [try #2] David Howells 2007/12/05 2008/01/23 50 8 126
Linux Security *Module* Framework (Was: LSM conversion to static interface
Simon Arlott 2007/10/24 2007/11/26 34 26 89
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access ControlSchaufler
Casey Kernel 2007/09/29 2007/10/30 32 24 81
[AppArmor 00/44] AppArmor security module overview John Johansen 2007/06/26 2007/07/04 9 19 76
[TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa 2008/04/04 2008/04/24 21 12 74
[AppArmor 00/45] AppArmor security module overview John Johansen 2007/10/25 2007/10/28 4 10 70
[PATCH 00/37] Permit filesystem local caching David Howells 2008/02/20 2008/02/26 7 8 68
Re: implement-file-posix-capabilities.patch Serge E. Hallyn 2007/06/21 2007/07/04 14 14 65
[RFC 0/28] Patches to pass vfsmount to LSM inode security hooks Tony Jones 2007/02/05 2007/02/12 8 12 61
[RFC] [PATCH] Replace security fields with hashtable Serge E. Hallyn 2004/10/26 2004/11/01 7 8 61
[TOMOYO 00/15](repost) TOMOYO Linux - MAC based on process invocation history.
Kentaro Takeda 2007/10/02 2007/10/15 14 11 54
[RFC][PATCH] Simplified mandatory access control kernel implementation Schaufler
Casey 2007/07/14 2007/08/06 24 7 53
New stacker performance results Serge E. Hallyn 2005/05/18 2005/05/26 9 12 51
[patch 00/15] security: pass path instead of inode to security ops Miklos Szeredi 2008/05/29 2008/06/14 17 10 51
[PATCH] Version 10 (2.6.24-rc1) Smack: Simplified Mandatory Access Control Kernel
Casey Schaufler 2007/11/02 2007/11/11 10 9 50
AppArmor FAQ John Johansen 2007/04/16 2007/06/09 55 15 48](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-58-320.jpg)
![LSM important threads 10
[AppArmor 00/41] AppArmor security module overview 13 17 18
[AppArmor 00/45] AppArmor security module overview 12 15 19
RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) 1 20 20
Linux Security *Module* Framework (Was: LSM conversion to static interface 6 18 15
[RFC][PATCH 0/11] security: AppArmor - Overview 0 19 17
TCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel 5 16 14
AppArmor FAQ 16 131
[PATCH 00/28] Permit filesystem local caching [try #2] 0 14 16
[AppArmor 00/44] AppArmor security module overview 0 14 13
[TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released 0 10 12
0 10 20 30 40 50
days people messages](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-63-320.jpg)
![LSM important threads 20
rank- rank- rank-
subject from days people messages point
days people messages
[AppArmor 00/41] AppArmor security module overview John Johansen 49 24 176 13 17 18 48
[AppArmor 00/45] AppArmor security module overview John Johansen 44 22 236 12 15 19 46
[RFC][PATCH 0/7] fireflier LSM for labeling sockets based onTorok Edwin
its creator (owner) 27 34 244 1 20 20 41
Linux Security *Module* Framework (Was: LSM conversion to static Arlott
Simon interface 34 26 89 6 18 15 39
[RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones 10 33 170 19 17 36
[PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory AccessSchaufler
Casey Control Kernel 32 24 81 5 16 14 35
AppArmor FAQ John Johansen 55 15 48 16 13 1 30
[PATCH 00/28] Permit filesystem local caching [try #2] David Howells 50 8 126 14 16 30
[AppArmor 00/44] AppArmor security module overview John Johansen 9 19 76 14 13 27
[TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa 21 12 74 10 12 22
Re: implement-file-posix-capabilities.patch Serge E. Hallyn 14 14 65 12 9 21
[PATCH 0/3] exporting capability name/code pairs (final#2) KaiGai Kohei 82 7 32 20 20
[PATCH] capabilities: implement per-process securebits Andrew G. Morgan 70 3 7 19 19
[PATCH] Implement file posix capabilities Serge E. Hallyn 59 5 9 18 18
[PATCH 2/2-v2] NFS: use new LSM interfaces to explicitly set mount options
Eric Paris 57 3 6 17 17
[RFC 0/28] Patches to pass vfsmount to LSM inode security hooks Jones
Tony 8 12 61 8 8 16
Mediating send_sigurg Stephen Smalley 54 2 12 15 15
New stacker performance results Serge E. Hallyn 9 12 51 9 4 13
[AppArmor 00/45] AppArmor security module overview John Johansen 4 10 70 1 11 12
Re: Linux Security *Module* Framework (Was: LSM conversion to static interface)
Rob Meijer 9 13 33 11 11](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-64-320.jpg)
![LSM important threads 10
Subject By
1 [AppArmor 00/41] AppArmor security module overview John Johansen
2 [AppArmor 00/45] AppArmor security module overview John Johansen
3 [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner)
Torok Edwin
4 Linux Security *Module* Framework (Was: LSM conversion to Simoninterface
static Arlott
5 [RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones
6 [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Schaufler
Casey Control Kernel
7 AppArmor FAQ John Johansen
8 [PATCH 00/28] Permit filesystem local caching [try #2] David Howells
9 [AppArmor 00/44] AppArmor security module overview John Johansen
10 [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-65-320.jpg)
![LSM important threads top 10
Subject By
1 [AppArmor 00/41] AppArmor security module overview John Johansen
2 [AppArmor 00/45] AppArmor security module overview John Johansen
3 [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner)
Torok Edwin
4 Linux Security *Module* Framework (Was: LSM conversion to Simoninterface
static Arlott
5 [RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones
6 [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Schaufler
Casey Control Kernel
7 AppArmor FAQ John Johansen
8 [PATCH 00/28] Permit filesystem local caching [try #2] David Howells
9 [AppArmor 00/44] AppArmor security module overview John Johansen
10 [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa
• 4 LSM related (including 1 for Smack)
• 1 for TOMOYO
• 5 out of 10 belong to AppArmor](https://image.slidesharecdn.com/ols2008-bof-pdf-090926063940-phpapp02/85/OLS2008-Time-to-Glean-Mac-for-Linux-history-and-the-future-66-320.jpg)
OLS2008: Time to Glean - Mac for Linux history and the future
- 1. Time to Glean MAC for Linux, history and the future July 25, 2008 Toshiharu Harada <haradats@nttdata.co.jp> Kentaro Takeda Tetsuo Handa NTT DATA CORPORATION
- 2. Welcome to my BoF of “MAC for Linux:Time to Glean” I am project manager of TOMOYO Linux, but this is *not* a TOMOYO Linux BoF
- 3. This BoF • looks in the history of Linux MAC: (Mandatory Access Control) • As Smack had been added as 2nd in-tree module, it might be a good time to stop by and look what have passed • I tried to find information from the LSM ml archive during the period December 2003 to June 2008
- 4. Please Don’t ... • Ask me if this is worth spending time (I’ve already spent my time ...) • Get mad on me if the result is not what you want (we can’t tell what we find until we dig)
- 5. Where to look at? • ML archive has the information • Whole LKML seems to be too much ... • LSM mailing list archive should be a modest place for resort
- 6. How to glean? • Downloaded LSM message archive from gmane.org during the period of December 3, 2003 through June 30, 2008 • Plenty of nice tools are available –ruby, perl, sort, uniq ... (joy of computing) • Used Excel and Numbers occasionally for saving time purpose
- 7. Welcome aboard! Let’s start digging Is this free? Of course, it’s open source!
- 9. Can You Guess? 1. How many messages has been posted during December 3, 2003 - June 30, 2008?
- 10. Can You Guess? 1. How many messages has been posted during December 3, 2003 - June 30, 2008? 2. How many threads were there?
- 11. Can You Guess? 1. How many messages has been posted during December 3, 2003 - June 30, 2008? 2. How many threads were there? 3. How big is the downloaded mbox file?
- 12. Answer 6545 messages 978 threads 55MB (Dec. 2003 - Jun. 2008)
- 13. LSM traffic (Dec. 2003 - Jun. 2008)
- 15. LSM activities at a glance 7000 each month sum up 5250 3500 1750 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 17. Monthly detail 500 475 455 392 378 375 341 327 31111 3 250 220 200 186 180 179 144 142 147 143 138 125 115 107 104 103 96 86 8787 75 79 76 79 72 63 62 53 45 50 48 43 29 29 29 34 34 22 27 2020 1615 19 21 14 9 8 3 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 18. Monthly detail 500 475 455 Apr 2006 378 392 375 341 327 31111 3 250 220 200 186 180 179 144 142 147 143 138 125 115 107 104 103 96 86 8787 75 79 76 79 72 63 62 53 45 50 48 43 29 29 29 34 34 22 27 2020 1615 19 21 14 9 8 3 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 19. Monthly detail 500 475 455 Apr 2006 378 392 375 341 327 Jun 2007 31111 3 250 220 200 186 180 179 144 142 147 143 138 125 115 107 104 103 96 86 8787 75 79 76 79 72 63 62 53 45 50 48 43 29 29 29 34 34 22 27 2020 1615 19 21 14 9 8 3 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 20. Monthly detail 500 475 455 Oct 2007 Apr 2006 378 392 375 341 327 Jun 2007 31111 3 250 220 200 186 180 179 144 142 147 143 138 125 115 107 104 103 96 86 8787 75 79 76 79 72 63 62 53 45 50 48 43 29 29 29 34 34 22 27 2020 1615 19 21 14 9 8 3 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 21. 3 Peaks • Peaks should have reasons • Let’s take a look at each peaks
- 22. (1) April 2006 [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) Torok Edwin [RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones RE: [ANNOUNCE] Release Digsig 1.5: kernel module for run-timeauthentication of binaries Makan Pourzandi [ANNOUNCE] Release Digsig 1.5: kernel module for run-time authentication of binaries Makan Pourzandi [ANNOUNCE] ISSI is porting PitBull Foundation and LX to Linux using the LSM Mikel L. Matthews [2.6 patch] remove the Root Plug Support sample module Adrian Bunk using lsm hook to implement transparent file crypt hu jun RE: [ANNOUNCE] Release Digsig 1.5: kernel module forrun-timeauthentication of binaries Makan Pourzandi Re: [PATCH] fix up security_socket_getpeersec_* documentation Xiaolan Zhang about security and trust of linux in engineering information system hu jun A transparent secure architecture for special applications hu jun
- 23. (1) April 2006 0% 0% 1%0% 0% 1% 2%2% 5% 52% [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) Torok Edwin [RFC][PATCH 0/11] security: AppArmor - Overview Tony 36% Jones RE: [ANNOUNCE] Release Digsig 1.5: kernel module for run-timeauthentication of binaries Makan Pourzandi [ANNOUNCE] Release Digsig 1.5: kernel module for run-time authentication of binaries Makan Pourzandi [ANNOUNCE] ISSI is porting PitBull Foundation and LX to Linux using the LSM Mikel L. Matthews [2.6 patch] remove the Root Plug Support sample module Adrian Bunk using lsm hook to implement transparent file crypt hu jun RE: [ANNOUNCE] Release Digsig 1.5: kernel module forrun-timeauthentication of binaries Makan Pourzandi Re: [PATCH] fix up security_socket_getpeersec_* documentation Xiaolan Zhang about security and trust of linux in engineering information system hu jun A transparent secure architecture for special applications hu jun
- 24. (2) June 2007 [AppArmor 00/45] AppArmor security module overview John Johansen [AppArmor 00/44] AppArmor security module overview John Johansen Re: implement-file-posix-capabilities.patch Serge E. Hallyn [RFC] TOMOYO Linux Toshiharu Harada [TOMOYO 0/9] TOMOYO Linux security module. Kentaro Takeda [RFD 0/4] AppArmor - Don't pass NULL nameidata to vfs_create/lookup/permission IOPs John Johansen What kind of feature does New LSM security model need? Kazuki Omo [PATCH 1/1] file caps: update selinux xattr hooks Serge E. Hallyn Re: [TOMOYO 5/9] Memory and pathname management functions. Albert Cahalan [PATCH 1/1] file capabilities: get_file_caps cleanups Serge E. Hallyn [RFC][Patch 1/1] IBAC Patch Mimi Zohar [PATCH] [RFC] security: add hook inode_post_removexattr Hawk Xu [PATCH 1/1] file capabilities: introduce cap_setfcap Serge E. Hallyn Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook Pavel Machek Re: implement-file-posix-capabilities.patch Serge E. Hallyn
- 25. (2) June 2007 1%1% 0% 0% 0% 0% 1% 1% 2% 3% 4% 4% [AppArmor 00/45] AppArmor security module overview John Johansen [AppArmor 00/44] AppArmor security module overview John Johansen Re: implement-file-posix-capabilities.patch Serge E. Hallyn14% 52% [RFC] TOMOYO Linux Toshiharu Harada [TOMOYO 0/9] TOMOYO Linux security module. Kentaro Takeda [RFD 0/4] AppArmor - Don't pass NULL nameidata to vfs_create/lookup/permission IOPs John Johansen What kind of feature does New LSM security model need? Kazuki Omo [PATCH 1/1] file caps: update selinux xattr hooks Serge E. Hallyn Re: [TOMOYO 5/9] Memory and pathname management functions. 17% Cahalan Albert [PATCH 1/1] file capabilities: get_file_caps cleanups Serge E. Hallyn [RFC][Patch 1/1] IBAC Patch Mimi Zohar [PATCH] [RFC] security: add hook inode_post_removexattr Hawk Xu [PATCH 1/1] file capabilities: introduce cap_setfcap Serge E. Hallyn Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook Pavel Machek Re: implement-file-posix-capabilities.patch Serge E. Hallyn
- 26. (3) October 2007 Linux Security *Module* Framework (Was: LSM conversion to static interface Simon Arlott [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler [AppArmor 00/45] AppArmor security module overview John Johansen [TOMOYO 00/15](repost) TOMOYO Linux - MAC based on process invocation history. Kentaro Takeda Re: Linux Security *Module* Framework (Was: LSM conversion to static interface) Rob Meijer [RFC 0/2] getsecurity/vfs_getxattr cleanup Daved P. Quigley Re: LSM conversion to static interface Thomas Fricaccia [PATCH] Version 4 (2.6.23-rc8-mm2) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler [TOMOYO #4 00/13] TOMOYO Linux - MAC based on process invocation history. Tetsuo Handa [PATCH 1/2 -mm] capabilities: clean up file capability reading Serge E. Hallyn
- 27. (3) October 2007 3% 3% 4% 22% 5% 5% 8% Linux Security *Module* Framework (Was: LSM conversion to static interface Simon Arlott [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler 20% [AppArmor 00/45] AppArmor security module overview John Johansen [TOMOYO 00/15](repost) TOMOYO Linux - MAC based on process invocation history. Kentaro Takeda 13% Re: Linux Security *Module* Framework (Was: LSM conversion to static interface) Rob Meijer [RFC 0/2] getsecurity/vfs_getxattr cleanup Daved P. Quigley Re: LSM conversion to static interface Thomas Fricaccia 17% [PATCH] Version 4 (2.6.23-rc8-mm2) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler [TOMOYO #4 00/13] TOMOYO Linux - MAC based on process invocation history. Tetsuo Handa [PATCH 1/2 -mm] capabilities: clean up file capability reading Serge E. Hallyn
- 28. People “It is people that writes and reads messages”
- 29. People “It is people that writes and reads messages” It is also people that fight and argue (and reject)
- 31. LSM top 20 contributors 650 James Morris 520 John Johansen Chris Wright Paul Moore 390 Tetsuo Handa Crispin Cowan Andrew G. Morgan Greg KH 260 Valdis.Kletnieks Kentaro Takeda Pavel Machek 130 Tony Jones Andreas Gruenbacher KaiGai Kohei Ahmed S. Darwish 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08 Kylene Jo Hall
- 32. LSM top 20 contributors 650 Casey Schaufler James Morris 520 John Johansen Chris Wright Paul Moore 390 Tetsuo Handa Crispin Cowan Andrew G. Morgan Greg KH 260 Valdis.Kletnieks Kentaro Takeda Pavel Machek 130 Tony Jones Andreas Gruenbacher KaiGai Kohei Ahmed S. Darwish 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08 Kylene Jo Hall
- 33. LSM top 20 contributors 650 Stephen Smalley Casey Schaufler James Morris 520 John Johansen Chris Wright Paul Moore 390 Tetsuo Handa Crispin Cowan Andrew G. Morgan Greg KH 260 Valdis.Kletnieks Kentaro Takeda Pavel Machek 130 Tony Jones Andreas Gruenbacher KaiGai Kohei Ahmed S. Darwish 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08 Kylene Jo Hall
- 34. LSM top 20 contributors 650 David Howells Stephen Smalley Casey Schaufler James Morris 520 John Johansen Chris Wright Paul Moore 390 Tetsuo Handa Crispin Cowan Andrew G. Morgan Greg KH 260 Valdis.Kletnieks Kentaro Takeda Pavel Machek 130 Tony Jones Andreas Gruenbacher KaiGai Kohei Ahmed S. Darwish 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08 Kylene Jo Hall
- 35. LSM top 20 contributors 650 David Howells Stephen Smalley Casey Schaufler James Morris 520 John Johansen Chris Wright Paul Moore 390 Tetsuo Handa Crispin Cowan Andrew G. Morgan Greg KH 260 Valdis.Kletnieks Kentaro Takeda Pavel Machek 130 Tony Jones Andreas Gruenbacher KaiGai Kohei Ahmed S. Darwish 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08 Kylene Jo Hall
- 36. LSM top 20 contributors Serge E. Hallyn 650 David Howells Stephen Smalley Casey Schaufler James Morris 520 John Johansen Chris Wright Paul Moore 390 Tetsuo Handa Crispin Cowan Andrew G. Morgan Greg KH 260 Valdis.Kletnieks Kentaro Takeda Pavel Machek 130 Tony Jones Andreas Gruenbacher KaiGai Kohei Ahmed S. Darwish 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08 Kylene Jo Hall
- 37. LSM top 20 contributors Serge E. Hallyn 650 David Howells Stephen Smalley Casey Schaufler James Morris 520 John Johansen Chris Wright Paul Moore 390 Tetsuo Handa Crispin Cowan Andrew G. Morgan Greg KH 260 Valdis.Kletnieks Kentaro Takeda Pavel Machek 130 Tony Jones Andreas Gruenbacher KaiGai Kohei Ahmed S. Darwish 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08 Kylene Jo Hall
- 39. Men of wisdom (“cc”ed ranking) 2400 1600 800 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 40. Men of wisdom (“cc”ed ranking) 2400 Stephen Smalley Chris Wright Casey Schaufler James Morris Serge E. Hallyn Andrew Morton David Howells Christoph Hellwig 1600 Andreas Gruenbacher Al Viro John Johansen Trond Myklebust Linus Torvalds Andrew G. Morgan Crispin Cowan Greg KH Eric Paris 800 Tony Jones Tetsuo Handa Arjan van de Ven 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 42. 7000 Which ML cc-ed most 5250 3500 1750 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 43. 7000 Which ML cc-ed most linux-security-module ML (self) linux-kernel ML 5250 linux-fsdevel ML selinux ML netdev ML 3500 fireflier-devel ML linux-audit ML 1750 0 Dec-03 Mar-04 Jun-04 Sep-04 Dec-04 Mar-05 Jun-05 Sep-05 Dec-05 Mar-06 Jun-06 Sep-06 Dec-06 Mar-07 Jun-07 Sep-07 Dec-07 Mar-08 Jun-08
- 45. What is thread?
- 46. What is thread?
- 47. What should we look at for threads? 1. Life time (how many days) 2. Number of messages 3. Number of people posted their opinions to the thread
- 48. Long lived threads 10 82 70 59 57 55 days 54 50 49 44 42 0 30 60 90 [PATCH 0/3] exporting capability name/code pairs (final#2) [PATCH] capabilities: implement per-process securebits [PATCH] Implement file posix capabilities [PATCH 2/2-v2] NFS: use new LSM interfaces to explicitly set mount options AppArmor FAQ Mediating send_sigurg [PATCH 00/28] Permit filesystem local caching [try #2] [AppArmor 00/41] AppArmor security module overview [AppArmor 00/45] AppArmor security module overview [PATCH 1/1] security: introduce fs caps
- 49. Long lived threads 20 subject from start end days people messages [PATCH 0/3] exporting capability name/code pairs (final#2) KaiGai Kohei 2008/02/24 2008/05/15 82 7 32 [PATCH] capabilities: implement per-process securebits Andrew G. Morgan 2008/02/18 2008/04/27 70 3 7 [PATCH] Implement file posix capabilities Serge E. Hallyn 2006/11/27 2007/01/24 59 5 9 [PATCH 2/2-v2] NFS: use new LSM interfaces to explicitly set mount optionsParis Eric 2008/03/05 2008/04/30 57 3 6 AppArmor FAQ John Johansen 2007/04/16 2007/06/09 55 15 48 Mediating send_sigurg Stephen Smalley 2004/08/27 2004/10/19 54 2 12 [PATCH 00/28] Permit filesystem local caching [try #2] David Howells 2007/12/05 2008/01/23 50 8 126 [AppArmor 00/41] AppArmor security module overview John Johansen 2007/04/12 2007/05/30 49 24 176 [AppArmor 00/45] AppArmor security module overview John Johansen 2007/05/14 2007/06/26 44 22 236 [PATCH 1/1] security: introduce fs caps Serge E. Hallyn 2006/11/08 2006/12/19 42 6 30 [PATCH] Updated BSD Secure Levels Patch Michael Halcrow 2003/12/03 2004/01/10 39 2 2 [PATCH 3/7] SLIM main patch Kylene Jo Hall 2006/09/12 2006/10/20 39 3 8 [PATCH] 64 bit capabilities Andrew G. Morgan 2007/11/07 2007/12/13 37 4 19 [RFC] [Stacking v4 3/3] Cleaned up stacker patch Serge E. Hallyn 2004/12/03 2005/01/06 35 3 8 Linux Security *Module* Framework (Was: LSM conversion to static interfaceSimon Arlott 2007/10/24 2007/11/26 34 26 89 [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Casey Schaufler Kernel 2007/09/29 2007/10/30 32 24 81 Problem of attaching a security structer to sock in 2.6.4!! Yuan Chunyang 2004/05/17 2004/06/14 29 6 10 [TOMOYO 00/15] TOMOYO Linux - MAC based on process invocation histroy entaro Takeda K 2007/08/24 2007/09/21 29 8 37 [PATCH] Smack: Simplified Mandatory Access Control Kernel Casey Schaufler 2007/08/11 2007/09/07 28 11 43
- 50. Average thread life 3.76 days
- 51. Popular threads 10 34 33 26 24 24 people 22 19 15 14 13 0 10 20 30 40 [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) [RFC][PATCH 0/11] security: AppArmor - Overview Linux Security *Module* Framework (Was: LSM conversion to static interface [AppArmor 00/41] AppArmor security module overview [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel [AppArmor 00/45] AppArmor security module overview [AppArmor 00/44] AppArmor security module overview AppArmor FAQ Re: implement-file-posix-capabilities.patch Re: Linux Security *Module* Framework (Was: LSM conversion to static interface)
- 52. Popular threads 20 subject from start end days people messages [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) Torok Edwin 2006/04/07 2006/05/03 27 34 244 [RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones 2006/04/19 2006/04/28 10 33 170 Linux Security *Module* Framework (Was: LSM conversion to static interface Simon Arlott 2007/10/24 2007/11/26 34 26 89 [AppArmor 00/41] AppArmor security module overview John Johansen 2007/04/12 2007/05/30 49 24 176 [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access ControlSchaufler Casey Kernel 2007/09/29 2007/10/30 32 24 81 [AppArmor 00/45] AppArmor security module overview John Johansen 2007/05/14 2007/06/26 44 22 236 [AppArmor 00/44] AppArmor security module overview John Johansen 2007/06/26 2007/07/04 9 19 76 AppArmor FAQ John Johansen 2007/04/16 2007/06/09 55 15 48 Re: implement-file-posix-capabilities.patch Serge E. Hallyn 2007/06/21 2007/07/04 14 14 65 Re: Linux Security *Module* Framework (Was: LSM conversion to static interface) Rob Meijer 2007/10/29 2007/11/06 9 13 33 [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa 2008/04/04 2008/04/24 21 12 74 New stacker performance results Serge E. Hallyn 2005/05/18 2005/05/26 9 12 51 [RFC 0/28] Patches to pass vfsmount to LSM inode security hooks Tony Jones 2007/02/05 2007/02/12 8 12 61 RE: [ANNOUNCE] Release Digsig 1.5: kernel module for run-timeauthentication of binaries Makan Pourzandi 2006/04/24 2006/04/28 5 12 25 [PATCH] Smack: Simplified Mandatory Access Control Kernel Casey Schaufler 2007/08/11 2007/09/07 28 11 43 [TOMOYO 00/15](repost) TOMOYO Linux - MAC based on process invocation history. Kentaro Takeda 2007/10/02 2007/10/15 14 11 54 [PATCH try #3] security: Convert LSM into a static interface James Morris 2007/07/14 2007/07/24 11 11 27 [patch 00/15] security: pass path instead of inode to security ops Miklos Szeredi 2008/05/29 2008/06/14 17 10 51 [RFC]Introduce generalized hooks for getting and setting inode secctx David P. Quigley 2008/03/05 2008/03/10 6 10 39 [AppArmor 00/45] AppArmor security module overview John Johansen 2007/10/25 2007/10/28 4 10 70
- 53. How crowded is the room? LSM
- 54. Crowded threads
- 55. Crowded threads
- 56. how many people joined the party? 2.45 • per thread on the average
- 57. Active threads 10 244 236 176 170 126 messages 89 81 76 74 70 0 50 100 150 200 250 [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) [AppArmor 00/45] AppArmor security module overview [AppArmor 00/41] AppArmor security module overview [RFC][PATCH 0/11] security: AppArmor - Overview [PATCH 00/28] Permit filesystem local caching [try #2] Linux Security *Module* Framework (Was: LSM conversion to static interface [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel [AppArmor 00/44] AppArmor security module overview [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released [AppArmor 00/45] AppArmor security module overview
- 58. Active threads 20 subject from start end days people messages [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) Torok Edwin 2006/04/07 2006/05/03 27 34 244 [AppArmor 00/45] AppArmor security module overview John Johansen 2007/05/14 2007/06/26 44 22 236 [AppArmor 00/41] AppArmor security module overview John Johansen 2007/04/12 2007/05/30 49 24 176 [RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones 2006/04/19 2006/04/28 10 33 170 [PATCH 00/28] Permit filesystem local caching [try #2] David Howells 2007/12/05 2008/01/23 50 8 126 Linux Security *Module* Framework (Was: LSM conversion to static interface Simon Arlott 2007/10/24 2007/11/26 34 26 89 [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access ControlSchaufler Casey Kernel 2007/09/29 2007/10/30 32 24 81 [AppArmor 00/44] AppArmor security module overview John Johansen 2007/06/26 2007/07/04 9 19 76 [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa 2008/04/04 2008/04/24 21 12 74 [AppArmor 00/45] AppArmor security module overview John Johansen 2007/10/25 2007/10/28 4 10 70 [PATCH 00/37] Permit filesystem local caching David Howells 2008/02/20 2008/02/26 7 8 68 Re: implement-file-posix-capabilities.patch Serge E. Hallyn 2007/06/21 2007/07/04 14 14 65 [RFC 0/28] Patches to pass vfsmount to LSM inode security hooks Tony Jones 2007/02/05 2007/02/12 8 12 61 [RFC] [PATCH] Replace security fields with hashtable Serge E. Hallyn 2004/10/26 2004/11/01 7 8 61 [TOMOYO 00/15](repost) TOMOYO Linux - MAC based on process invocation history. Kentaro Takeda 2007/10/02 2007/10/15 14 11 54 [RFC][PATCH] Simplified mandatory access control kernel implementation Schaufler Casey 2007/07/14 2007/08/06 24 7 53 New stacker performance results Serge E. Hallyn 2005/05/18 2005/05/26 9 12 51 [patch 00/15] security: pass path instead of inode to security ops Miklos Szeredi 2008/05/29 2008/06/14 17 10 51 [PATCH] Version 10 (2.6.24-rc1) Smack: Simplified Mandatory Access Control Kernel Casey Schaufler 2007/11/02 2007/11/11 10 9 50 AppArmor FAQ John Johansen 2007/04/16 2007/06/09 55 15 48
- 59. how many “no-children” threads? 470 (48%) this includes SPAM messages
- 60. Time to determine “important” threads • “How?” is the question • My version of completely fair formula :-) • Give points to threads ranked 1-20 according to the rank (1st thread gets 20, 20th one gets 1) • Apply for 3 aspects (days/people/messages), so the perfect thread get 60 points
- 61. Example days people messages 8th 4th 3rd rank-days rank-people rank-messages 21 - 8 = 13 21 - 4 = 17 21 - 3 = 18 total point is 13+17+18 = 48
- 62. Results • LSM ml top 10 important threads are ... Good, boy. Show me the list.
- 63. LSM important threads 10 [AppArmor 00/41] AppArmor security module overview 13 17 18 [AppArmor 00/45] AppArmor security module overview 12 15 19 RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) 1 20 20 Linux Security *Module* Framework (Was: LSM conversion to static interface 6 18 15 [RFC][PATCH 0/11] security: AppArmor - Overview 0 19 17 TCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel 5 16 14 AppArmor FAQ 16 131 [PATCH 00/28] Permit filesystem local caching [try #2] 0 14 16 [AppArmor 00/44] AppArmor security module overview 0 14 13 [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released 0 10 12 0 10 20 30 40 50 days people messages
- 64. LSM important threads 20 rank- rank- rank- subject from days people messages point days people messages [AppArmor 00/41] AppArmor security module overview John Johansen 49 24 176 13 17 18 48 [AppArmor 00/45] AppArmor security module overview John Johansen 44 22 236 12 15 19 46 [RFC][PATCH 0/7] fireflier LSM for labeling sockets based onTorok Edwin its creator (owner) 27 34 244 1 20 20 41 Linux Security *Module* Framework (Was: LSM conversion to static Arlott Simon interface 34 26 89 6 18 15 39 [RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones 10 33 170 19 17 36 [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory AccessSchaufler Casey Control Kernel 32 24 81 5 16 14 35 AppArmor FAQ John Johansen 55 15 48 16 13 1 30 [PATCH 00/28] Permit filesystem local caching [try #2] David Howells 50 8 126 14 16 30 [AppArmor 00/44] AppArmor security module overview John Johansen 9 19 76 14 13 27 [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa 21 12 74 10 12 22 Re: implement-file-posix-capabilities.patch Serge E. Hallyn 14 14 65 12 9 21 [PATCH 0/3] exporting capability name/code pairs (final#2) KaiGai Kohei 82 7 32 20 20 [PATCH] capabilities: implement per-process securebits Andrew G. Morgan 70 3 7 19 19 [PATCH] Implement file posix capabilities Serge E. Hallyn 59 5 9 18 18 [PATCH 2/2-v2] NFS: use new LSM interfaces to explicitly set mount options Eric Paris 57 3 6 17 17 [RFC 0/28] Patches to pass vfsmount to LSM inode security hooks Jones Tony 8 12 61 8 8 16 Mediating send_sigurg Stephen Smalley 54 2 12 15 15 New stacker performance results Serge E. Hallyn 9 12 51 9 4 13 [AppArmor 00/45] AppArmor security module overview John Johansen 4 10 70 1 11 12 Re: Linux Security *Module* Framework (Was: LSM conversion to static interface) Rob Meijer 9 13 33 11 11
- 65. LSM important threads 10 Subject By 1 [AppArmor 00/41] AppArmor security module overview John Johansen 2 [AppArmor 00/45] AppArmor security module overview John Johansen 3 [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) Torok Edwin 4 Linux Security *Module* Framework (Was: LSM conversion to Simoninterface static Arlott 5 [RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones 6 [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Schaufler Casey Control Kernel 7 AppArmor FAQ John Johansen 8 [PATCH 00/28] Permit filesystem local caching [try #2] David Howells 9 [AppArmor 00/44] AppArmor security module overview John Johansen 10 [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa
- 66. LSM important threads top 10 Subject By 1 [AppArmor 00/41] AppArmor security module overview John Johansen 2 [AppArmor 00/45] AppArmor security module overview John Johansen 3 [RFC][PATCH 0/7] fireflier LSM for labeling sockets based on its creator (owner) Torok Edwin 4 Linux Security *Module* Framework (Was: LSM conversion to Simoninterface static Arlott 5 [RFC][PATCH 0/11] security: AppArmor - Overview Tony Jones 6 [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Schaufler Casey Control Kernel 7 AppArmor FAQ John Johansen 8 [PATCH 00/28] Permit filesystem local caching [try #2] David Howells 9 [AppArmor 00/44] AppArmor security module overview John Johansen 10 [TOMOYO #7 00/30] TOMOYO Linux 1.6.0 released Tetsuo Handa • 4 LSM related (including 1 for Smack) • 1 for TOMOYO • 5 out of 10 belong to AppArmor
- 67. TOMOYO, AppArmor and 2003-12 Smack 2007 2008-6 ??
- 68. Close up (After 2007) ??
- 69. AppArmor, Smack and TOMOYO which is which? guess! guess! guess! past now
- 70. AppArmor, Smack and TOMOYO which is which? guess! guess! past now
- 71. AppArmor, Smack and TOMOYO which is which? guess! past now
- 72. AppArmor, Smack and TOMOYO which is which? past now
- 73. AppArmor, Smack and TOMOYO which is which? past now
- 74. Summary • Numbers of messages passing by every day • We always have a lot of things to do and it’s hard to stop by and think about the past • I felt we were doing kind of waste and that was a major motivation of this attempt • Despite of the amount time I spent, I don’t really think I found out something quite new ... • There should be more wise way to extract valuable information from the past