* [GIT PULL] SELinux patches for v5.13
@ 2021-04-26 23:27 Paul Moore
2021-04-27 20:54 ` pr-tracker-bot
0 siblings, 1 reply; 2+ messages in thread
From: Paul Moore @ 2021-04-26 23:27 UTC (permalink / raw)
To: Linus Torvalds; +Cc: linux-kernel, selinux, linux-security-module
Hi Linus,
Here is the SELinux pull request for v5.13, the highlights are below:
* Add support for measuring the SELinux state and policy capabilities using IMA.
* A handful of SELinux/NFS patches to compare the SELinux state of one
mount with a set of mount options. Olga goes into more detail in the
patch descriptions, but this is important as it allows more
flexibility when using NFS and SELinux context mounts.
* Properly differentiate between the subjective and objective LSM
credentials; including support for the SELinux and Smack. My clumsy
attempt at a proper fix for AppArmor didn't quite pass muster so John
is working on a proper AppArmor patch, in the meantime this set of
patches shouldn't change the behavior of AppArmor in any way. This
change explains the bulk of the diffstate beyond security/.
* Fix a problem where we were not properly terminating the permission
list for two SELinux object classes.
Everything has been tested against the selinux-testsuite and as of a
few moments ago the tag applies cleanly to your tree; please merge
this for v5.13.
Thanks,
-Paul
--
The following changes since commit a38fd8748464831584a19438cbb3082b5a2dab15:
Linux 5.12-rc2 (2021-03-05 17:33:41 -0800)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
tags/selinux-pr-20210426
for you to fetch changes up to e4c82eafb609c2badc56f4e11bc50fcf44b8e9eb:
selinux: add proper NULL termination to the secclass_map permissions
(2021-04-21 21:43:25 -0400)
----------------------------------------------------------------
selinux/stable-5.13 PR 20210426
----------------------------------------------------------------
Lakshmi Ramasubramanian (1):
selinux: measure state and policy capabilities
Olga Kornievskaia (3):
lsm,selinux: add new hook to compare new mount to an existing mount
nfs: remove unneeded null check in nfs_fill_super()
nfs: account for selinux security context when deciding to share
superblock
Paul Moore (4):
lsm: separate security_task_getsecid() into subjective and objective
variants
selinux: clarify task subjective and objective credentials
smack: differentiate between subjective and objective task credentials
selinux: add proper NULL termination to the secclass_map permissions
Vivek Goyal (1):
selinux: Allow context mounts for unpriviliged overlayfs
Xiong Zhenwu (2):
selinux: fix misspellings using codespell tool
selinux: fix misspellings using codespell tool
drivers/android/binder.c | 11 ++-
fs/nfs/fs_context.c | 3 +
fs/nfs/internal.h | 1 +
fs/nfs/super.c | 6 +-
include/linux/cred.h | 2 +-
include/linux/lsm_hook_defs.h | 6 +-
include/linux/lsm_hooks.h | 18 +++-
include/linux/nfs_fs_sb.h | 1 +
include/linux/security.h | 18 +++-
kernel/audit.c | 4 +-
kernel/auditfilter.c | 3 +-
kernel/auditsc.c | 8 +-
kernel/bpf/bpf_lsm.c | 3 +-
net/netlabel/netlabel_unlabeled.c | 2 +-
net/netlabel/netlabel_user.h | 2 +-
security/apparmor/lsm.c | 3 +-
security/integrity/ima/ima_appraise.c | 2 +-
security/integrity/ima/ima_main.c | 14 +--
security/security.c | 20 +++-
security/selinux/hooks.c | 170 ++++++++++++++++++++++++------
security/selinux/ima.c | 87 +++++++++++++++-
security/selinux/include/classmap.h | 5 +-
security/selinux/include/ima.h | 6 ++
security/selinux/include/security.h | 2 +-
security/selinux/selinuxfs.c | 6 ++
security/selinux/ss/hashtab.c | 2 +-
security/selinux/ss/services.c | 2 +-
security/smack/smack.h | 18 +++-
security/smack/smack_lsm.c | 39 +++++---
29 files changed, 372 insertions(+), 92 deletions(-)
--
paul moore
www.paul-moore.com
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [GIT PULL] SELinux patches for v5.13
2021-04-26 23:27 [GIT PULL] SELinux patches for v5.13 Paul Moore
@ 2021-04-27 20:54 ` pr-tracker-bot
0 siblings, 0 replies; 2+ messages in thread
From: pr-tracker-bot @ 2021-04-27 20:54 UTC (permalink / raw)
To: Paul Moore; +Cc: Linus Torvalds, linux-kernel, selinux, linux-security-module
The pull request you sent on Mon, 26 Apr 2021 19:27:42 -0400:
> git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20210426
has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/f1c921fb70de06c7eda59104470134aecc7a07c4
Thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2021-04-27 20:54 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-04-26 23:27 [GIT PULL] SELinux patches for v5.13 Paul Moore
2021-04-27 20:54 ` pr-tracker-bot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).