[PATCH 00/12] credential guards: credential preparation

From: Christian Brauner
Date: Mon Nov 03 2025 - 10:49:41 EST


This converts most users combining

* prepare_creds()
* modify new creds
* override_creds()
* revert_creds()
* put_cred()

to rely on credentials guards.

Signed-off-by: Christian Brauner <brauner@xxxxxxxxxx>
---
Christian Brauner (12):
cred: add prepare credential guard
sev-dev: use guard for path
sev-dev: use prepare credential guard
sev-dev: use override credential guards
coredump: move revert_cred() before coredump_cleanup()
coredump: pass struct linux_binfmt as const
coredump: mark struct mm_struct as const
coredump: split out do_coredump() from vfs_coredump()
coredump: use prepare credential guard
coredump: use override credential guard
trace: use prepare credential guard
trace: use override credential guard

drivers/crypto/ccp/sev-dev.c | 15 ++---
fs/coredump.c | 142 +++++++++++++++++++--------------------
include/linux/cred.h | 5 ++
include/linux/sched/coredump.h | 2 +-
kernel/trace/trace_events_user.c | 15 ++---
5 files changed, 86 insertions(+), 93 deletions(-)
---
base-commit: bcbcea89c608394efecb35237fa9fc1bf5f349d1
change-id: 20251103-work-creds-guards-prepare_creds-101e75226f70