[PATCH 00/12] credential guards: credential preparation
Christian Brauner
brauner at kernel.org
Tue Nov 4 01:57:26 AEDT 2025
This converts most users combining
* prepare_creds()
* modify new creds
* override_creds()
* revert_creds()
* put_cred()
to rely on credentials guards.
Signed-off-by: Christian Brauner <brauner at kernel.org>
---
Christian Brauner (12):
cred: add prepare credential guard
sev-dev: use guard for path
sev-dev: use prepare credential guard
sev-dev: use override credential guards
coredump: move revert_cred() before coredump_cleanup()
coredump: pass struct linux_binfmt as const
coredump: mark struct mm_struct as const
coredump: split out do_coredump() from vfs_coredump()
coredump: use prepare credential guard
coredump: use override credential guard
trace: use prepare credential guard
trace: use override credential guard
drivers/crypto/ccp/sev-dev.c | 15 ++---
fs/coredump.c | 142 +++++++++++++++++++--------------------
include/linux/cred.h | 5 ++
include/linux/sched/coredump.h | 2 +-
kernel/trace/trace_events_user.c | 15 ++---
5 files changed, 86 insertions(+), 93 deletions(-)
---
base-commit: bcbcea89c608394efecb35237fa9fc1bf5f349d1
change-id: 20251103-work-creds-guards-prepare_creds-101e75226f70
More information about the Linux-erofs
mailing list