v6.18.x-openpax

[quinndiggity]

Just a rebasing onto linux-6.18.y - only basic testing has been performed.

For testing, I've built this against a generic ubuntu-based kernel config for v6.18, generated via:

git clone --depth 1 -b master-next https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/questing ./linux-ubuntu

pushd ./linux-ubuntu

./debian/scripts/misc/annotations \
    -f 'debian.master/config/annotations' \
    -a 'amd64' \
    -l 'generic' \
    -e

and with that generated .config, updated it for v6.18, with the newest settings' defaults filled in via:

make olddefconfig

built with:

make -j $(nproc) bindeb-pkg

For the test system, used pax_softmode=1 along with security=tomoyo, to use tomoyo-editpolicy /etc/tomoyo in system-wide learning mode (in order to easily paxmark all the gjs related things), before setting pax_softmode=0 and rebooting to confirm that gdm and the entire gnome shell environment was working correctly.

Have done basic testing, confirming that these features, so far, seemingly function as expected:

• OPENPAX_SOFTMODE
• OPENPAX_XATTR_PAX_FLAGS
• OPENPAX_MPROTECT

For a cleaner view of just these commits, against mainline linux-6.18.y, check out: https://github.com/quinndiggity/linux-openpax/pull/1/commits