From: Paul Moore <paul@paul-moore.com>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org,
linux-kernel@vger.kernel.org
Subject: [GIT PULL] SELinux patches for v5.19
Date: Mon, 23 May 2022 10:13:04 -0400 [thread overview]
Message-ID: <CAHC9VhTFMrc3yRiQ=fnw0-qWCTuUcH3iD1txSvLUh71WFsLrFw@mail.gmail.com> (raw)
Linus,
We've got twelve patches queued for v5.19, with most being fairly
minor. The highlights are below:
- The checkreqprot and runtime disable knobs have been deprecated for
some time with no active users that we can find. In an effort to move
things along we are adding a pause when the knobs are used to help
make the deprecation more noticeable in case anyone is still using
these hacks in the shadows.
- We've added the anonymous inode class name to the AVC audit records
when anonymous inodes are involved. This should make writing policy
easier when anonymous inodes are involved.
- More constification work. This is fairly straightforward and the
source of most of the diffstat.
- The usual minor cleanups: remove unnecessary assignments, assorted
style/checkpatch fixes, kdoc fixes, macro while-loop encapsulations,
#include tweaks, etc.
Please merge for v5.19.
-Paul
--
The following changes since commit 3123109284176b1532874591f7c81f3837bbdc17:
Linux 5.18-rc1 (2022-04-03 14:08:21 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
tags/selinux-pr-20220523
for you to fetch changes up to 1af0e4a0233fea7e8226cb977d379dc20f9bbe11:
security: declare member holding string literal const
(2022-05-13 14:51:06 -0400)
----------------------------------------------------------------
selinux/stable-5.19 PR 20220523
----------------------------------------------------------------
Christian Göttsche (8):
selinux: resolve checkpatch errors
selinux: update parameter documentation
selinux: avoid extra semicolon
selinux: include necessary headers in headers
selinux: fix indentation level of mls_ops block
selinux: declare data arrays const
selinux: log anon inode class name
security: declare member holding string literal const
Michal Orzel (1):
selinux: Remove redundant assignments
Paul Moore (3):
selinux: runtime disable is deprecated, add some ssleep() discomfort
selinux: checkreqprot is deprecated, add some ssleep() discomfort
selinux: don't sleep when
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is true
include/linux/lsm_audit.h | 2 +
include/linux/lsm_hooks.h | 4 +-
scripts/selinux/genheaders/genheaders.c | 75 ++++++++++++--------
scripts/selinux/mdp/mdp.c | 4 +-
security/lsm_audit.c | 3 +
security/security.c | 2 +-
security/selinux/avc.c | 6 +-
security/selinux/hooks.c | 9 +--
security/selinux/include/audit.h | 5 +-
security/selinux/include/avc.h | 1 +
security/selinux/include/avc_ss.h | 4 +-
security/selinux/include/classmap.h | 2 +-
security/selinux/include/ibpkey.h | 2 +
security/selinux/include/initial_sid_to_string.h | 3 +-
security/selinux/include/netnode.h | 2 +
security/selinux/include/netport.h | 2 +
security/selinux/include/policycap.h | 2 +-
security/selinux/include/policycap_names.h | 2 +-
security/selinux/include/security.h | 4 ++
security/selinux/include/xfrm.h | 2 +
security/selinux/nlmsgtab.c | 12 ++--
security/selinux/selinuxfs.c | 8 ++-
security/selinux/ss/avtab.c | 20 +++----
security/selinux/ss/policydb.c | 36 +++++-------
security/selinux/ss/services.c | 47 ++++++++-------
25 files changed, 144 insertions(+), 115 deletions(-)
--
paul-moore.com
next reply other threads:[~2022-05-23 14:13 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-05-23 14:13 Paul Moore [this message]
2022-05-24 20:26 ` [GIT PULL] SELinux patches for v5.19 pr-tracker-bot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='CAHC9VhTFMrc3yRiQ=fnw0-qWCTuUcH3iD1txSvLUh71WFsLrFw@mail.gmail.com' \
--to=paul@paul-moore.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=selinux@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).