[PATCH 00/12] credential guards: credential preparation

Christian Brauner brauner at kernel.org
Tue Nov 4 01:57:26 AEDT 2025


This converts most users combining

* prepare_creds()
* modify new creds
* override_creds()
* revert_creds()
* put_cred()

to rely on credentials guards.

Signed-off-by: Christian Brauner <brauner at kernel.org>
---
Christian Brauner (12):
      cred: add prepare credential guard
      sev-dev: use guard for path
      sev-dev: use prepare credential guard
      sev-dev: use override credential guards
      coredump: move revert_cred() before coredump_cleanup()
      coredump: pass struct linux_binfmt as const
      coredump: mark struct mm_struct as const
      coredump: split out do_coredump() from vfs_coredump()
      coredump: use prepare credential guard
      coredump: use override credential guard
      trace: use prepare credential guard
      trace: use override credential guard

 drivers/crypto/ccp/sev-dev.c     |  15 ++---
 fs/coredump.c                    | 142 +++++++++++++++++++--------------------
 include/linux/cred.h             |   5 ++
 include/linux/sched/coredump.h   |   2 +-
 kernel/trace/trace_events_user.c |  15 ++---
 5 files changed, 86 insertions(+), 93 deletions(-)
---
base-commit: bcbcea89c608394efecb35237fa9fc1bf5f349d1
change-id: 20251103-work-creds-guards-prepare_creds-101e75226f70



More information about the Linux-erofs mailing list