Subject proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem
Author jannh@google.com
Date 2026-08-18 19:51:05 +0000 UTC
Version
Cc akpm@linux-foundation.org brauner@kernel.org david@kernel.org jack@suse.cz jannh@google.com jeffxu@google.com jmorris@namei.org liam@infradead.org linux-fsdevel@vger.kernel.org linux-mm@kvack.org linux-security-module@vger.kernel.org ljs@kernel.org omosnace@redhat.com paul@paul-moore.com pfalcato@suse.de selinux@vger.kernel.org serge@hallyn.com stephen.smalley.work@gmail.com tweek@google.com vbabka@kernel.org viro@zeniv.linux.org.uk
Patches (3)
Name Content [All]
[PATCH 1/3] proc: refactor /proc/$pid/mem to use struct as private_data [Body]
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) [Body]
[PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-08-18
Passed
ID (for dev) 0c8f5a4e-41cc-4ff0-94a9-fea6cf516574
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 2f1baf1fc8929e6c48370be543ad028ac7ad4131 [Config] passed [Log]
[KASAN] Boot test: Base 2f1baf1fc8929e6c48370be543ad028ac7ad4131 [Config] passed [Log]
[KASAN] Build Patched 2f1baf1fc8929e6c48370be543ad028ac7ad4131 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 2f1baf1fc8929e6c48370be543ad028ac7ad4131 [Config] [patched] passed [Log]
[KASAN] Fuzz 2f1baf1fc8929e6c48370be543ad028ac7ad4131 [Config] 2f1baf1fc8929e6c48370be543ad028ac7ad4131 [Config] [patched] passed [Log] [Artifacts]