[GIT,PULL] apparmor bug fixes for 6.5

Pull-request

git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2023-07-06

Message

John Johansen July 6, 2023, 6:28 p.m. UTC

Hi Linus,

Please pull the following set bug fixes to apparmor for 6.5 or 6.5-rc1

+ Bug Fixes
   - fix missing error check for rhashtable_insert_fast
   - add missing failure check in compute_xmatch_perms
   - fix policy_compat permission remap with extended permissions
   - fix profile verification and enable it
   - fix: kzalloc perms tables for shared dfas
   - Fix kernel-doc header for verify_dfa_accept_index
   - aa_buffer: Convert 1-element array to flexible array
   - Return directly after a failed kzalloc() in two functions
   - fix use of strcpy in policy_unpack_test
   - fix kernel-doc complaints
   - Fix some kernel-doc comments

thanks
- john


The following changes since commit 1b929c02afd37871d5afb9d498426f83432e71c2:

   Linux 6.2-rc1 (2022-12-25 13:41:39 -0800)

are available in the Git repository at:

   git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2023-07-06

for you to fetch changes up to 3f069c4c643225f2b96b4b3f8c30e4445f079d2e:

   apparmor: Fix kernel-doc header for verify_dfa_accept_index (2023-07-06 11:12:10 -0700)

----------------------------------------------------------------
+ Bug Fixes
       apparmor: fix missing error check for rhashtable_insert_fast
       apparmor: add missing failure check in compute_xmatch_perms
       apparmor: fix policy_compat permission remap with extended permissions
       apparmor: fix profile verification and enable it
       apparmor: fix: kzalloc perms tables for shared dfas
       apparmor: Fix kernel-doc header for verify_dfa_accept_index
       apparmor: aa_buffer: Convert 1-element array to flexible array
       apparmor: Return directly after a failed kzalloc() in two functions
       apparmor: fix use of strcpy in policy_unpack_test
       apparmor: fix kernel-doc complaints
       AppArmor: Fix some kernel-doc comments

----------------------------------------------------------------
Danila Chernetsov (1):
       apparmor: fix missing error check for rhashtable_insert_fast

John Johansen (5):
       apparmor: add missing failure check in compute_xmatch_perms
       apparmor: fix policy_compat permission remap with extended permissions
       apparmor: fix profile verification and enable it
       apparmor: fix: kzalloc perms tables for shared dfas
       apparmor: Fix kernel-doc header for verify_dfa_accept_index

Kees Cook (1):
       apparmor: aa_buffer: Convert 1-element array to flexible array

Markus Elfring (1):
       apparmor: Return directly after a failed kzalloc() in two functions

Rae Moar (1):
       apparmor: fix use of strcpy in policy_unpack_test

Randy Dunlap (1):
       apparmor: fix kernel-doc complaints

Yang Li (1):
       AppArmor: Fix some kernel-doc comments

  security/apparmor/crypto.c             |  10 ++--
  security/apparmor/file.c               |   2 +-
  security/apparmor/lsm.c                |   8 +--
  security/apparmor/policy.c             |  20 +++++--
  security/apparmor/policy_compat.c      |  20 +++++--
  security/apparmor/policy_unpack.c      | 102 +++++++++++++++++++++------------
  security/apparmor/policy_unpack_test.c |  13 ++---
  security/apparmor/secid.c              |   3 +-
  8 files changed, 110 insertions(+), 68 deletions(-)

Comments

[e-mail] July 7, 2023, 5:10 p.m. UTC | #1

The pull request you sent on Thu, 6 Jul 2023 11:28:17 -0700:

> git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2023-07-06

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/70806ee18a871140a73a2524a29865e1d904348c

Thank you!