* [PATCH] selinux: provide a "no sooner than" date for the checkreqprot removal
@ 2020-09-28 2:37 Paul Moore
2020-09-28 13:43 ` Stephen Smalley
2020-09-29 20:58 ` Paul Moore
0 siblings, 2 replies; 3+ messages in thread
From: Paul Moore @ 2020-09-28 2:37 UTC (permalink / raw)
To: selinux
We marked /sys/fs/selinux/checkreqprot as deprecated in Linux v5.7,
but didn't provide any guidance as to the timeframe. Considering
the state of checkreqprot, it seems like one year should be enough
time.
Signed-off-by: Paul Moore <paul@paul-moore.com>
---
.../ABI/obsolete/sysfs-selinux-checkreqprot | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Documentation/ABI/obsolete/sysfs-selinux-checkreqprot b/Documentation/ABI/obsolete/sysfs-selinux-checkreqprot
index 49ed9c8fd1e5..ed6b52ca210f 100644
--- a/Documentation/ABI/obsolete/sysfs-selinux-checkreqprot
+++ b/Documentation/ABI/obsolete/sysfs-selinux-checkreqprot
@@ -15,7 +15,7 @@ Description:
actual protection), and Android and Linux distributions have been
explicitly writing a "0" to /sys/fs/selinux/checkreqprot during
initialization for some time. Support for setting checkreqprot to 1
- will be removed in a future kernel release, at which point the kernel
+ will be removed no sooner than June 2021, at which point the kernel
will always cease using checkreqprot internally and will always
check the actual protections being applied upon mmap/mprotect calls.
The checkreqprot selinuxfs node will remain for backward compatibility
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [PATCH] selinux: provide a "no sooner than" date for the checkreqprot removal
2020-09-28 2:37 [PATCH] selinux: provide a "no sooner than" date for the checkreqprot removal Paul Moore
@ 2020-09-28 13:43 ` Stephen Smalley
2020-09-29 20:58 ` Paul Moore
1 sibling, 0 replies; 3+ messages in thread
From: Stephen Smalley @ 2020-09-28 13:43 UTC (permalink / raw)
To: Paul Moore; +Cc: SElinux list
On Sun, Sep 27, 2020 at 10:37 PM Paul Moore <paul@paul-moore.com> wrote:
>
> We marked /sys/fs/selinux/checkreqprot as deprecated in Linux v5.7,
> but didn't provide any guidance as to the timeframe. Considering
> the state of checkreqprot, it seems like one year should be enough
> time.
>
> Signed-off-by: Paul Moore <paul@paul-moore.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [PATCH] selinux: provide a "no sooner than" date for the checkreqprot removal
2020-09-28 2:37 [PATCH] selinux: provide a "no sooner than" date for the checkreqprot removal Paul Moore
2020-09-28 13:43 ` Stephen Smalley
@ 2020-09-29 20:58 ` Paul Moore
1 sibling, 0 replies; 3+ messages in thread
From: Paul Moore @ 2020-09-29 20:58 UTC (permalink / raw)
To: selinux
On Sun, Sep 27, 2020 at 10:37 PM Paul Moore <paul@paul-moore.com> wrote:
>
> We marked /sys/fs/selinux/checkreqprot as deprecated in Linux v5.7,
> but didn't provide any guidance as to the timeframe. Considering
> the state of checkreqprot, it seems like one year should be enough
> time.
>
> Signed-off-by: Paul Moore <paul@paul-moore.com>
> ---
> .../ABI/obsolete/sysfs-selinux-checkreqprot | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Documentation/ABI/obsolete/sysfs-selinux-checkreqprot b/Documentation/ABI/obsolete/sysfs-selinux-checkreqprot
> index 49ed9c8fd1e5..ed6b52ca210f 100644
> --- a/Documentation/ABI/obsolete/sysfs-selinux-checkreqprot
> +++ b/Documentation/ABI/obsolete/sysfs-selinux-checkreqprot
> @@ -15,7 +15,7 @@ Description:
> actual protection), and Android and Linux distributions have been
> explicitly writing a "0" to /sys/fs/selinux/checkreqprot during
> initialization for some time. Support for setting checkreqprot to 1
> - will be removed in a future kernel release, at which point the kernel
> + will be removed no sooner than June 2021, at which point the kernel
> will always cease using checkreqprot internally and will always
> check the actual protections being applied upon mmap/mprotect calls.
> The checkreqprot selinuxfs node will remain for backward compatibility
As this is a minor documentation change and not anything more
significant I've gone ahead and merged this into selinux/next.
--
paul moore
www.paul-moore.com
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2020-09-29 20:58 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-28 2:37 [PATCH] selinux: provide a "no sooner than" date for the checkreqprot removal Paul Moore
2020-09-28 13:43 ` Stephen Smalley
2020-09-29 20:58 ` Paul Moore
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.