| Message ID | CAHC9VhTFMrc3yRiQ=fnw0-qWCTuUcH3iD1txSvLUh71WFsLrFw@mail.gmail.com (mailing list archive) |
|---|---|
| State | Accepted |
| Delegated to: | Paul Moore |
| Headers | show |
| Series | [GIT,PULL] SELinux patches for v5.19 | expand |
The pull request you sent on Mon, 23 May 2022 10:13:04 -0400:
> git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20220523
has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/efd1df1982e9203b4f56cb0d5946a24885260ce5
Thank you!
Linus, We've got twelve patches queued for v5.19, with most being fairly minor. The highlights are below: - The checkreqprot and runtime disable knobs have been deprecated for some time with no active users that we can find. In an effort to move things along we are adding a pause when the knobs are used to help make the deprecation more noticeable in case anyone is still using these hacks in the shadows. - We've added the anonymous inode class name to the AVC audit records when anonymous inodes are involved. This should make writing policy easier when anonymous inodes are involved. - More constification work. This is fairly straightforward and the source of most of the diffstat. - The usual minor cleanups: remove unnecessary assignments, assorted style/checkpatch fixes, kdoc fixes, macro while-loop encapsulations, #include tweaks, etc. Please merge for v5.19. -Paul -- The following changes since commit 3123109284176b1532874591f7c81f3837bbdc17: Linux 5.18-rc1 (2022-04-03 14:08:21 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20220523 for you to fetch changes up to 1af0e4a0233fea7e8226cb977d379dc20f9bbe11: security: declare member holding string literal const (2022-05-13 14:51:06 -0400) ---------------------------------------------------------------- selinux/stable-5.19 PR 20220523 ---------------------------------------------------------------- Christian Göttsche (8): selinux: resolve checkpatch errors selinux: update parameter documentation selinux: avoid extra semicolon selinux: include necessary headers in headers selinux: fix indentation level of mls_ops block selinux: declare data arrays const selinux: log anon inode class name security: declare member holding string literal const Michal Orzel (1): selinux: Remove redundant assignments Paul Moore (3): selinux: runtime disable is deprecated, add some ssleep() discomfort selinux: checkreqprot is deprecated, add some ssleep() discomfort selinux: don't sleep when CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is true include/linux/lsm_audit.h | 2 + include/linux/lsm_hooks.h | 4 +- scripts/selinux/genheaders/genheaders.c | 75 ++++++++++++-------- scripts/selinux/mdp/mdp.c | 4 +- security/lsm_audit.c | 3 + security/security.c | 2 +- security/selinux/avc.c | 6 +- security/selinux/hooks.c | 9 +-- security/selinux/include/audit.h | 5 +- security/selinux/include/avc.h | 1 + security/selinux/include/avc_ss.h | 4 +- security/selinux/include/classmap.h | 2 +- security/selinux/include/ibpkey.h | 2 + security/selinux/include/initial_sid_to_string.h | 3 +- security/selinux/include/netnode.h | 2 + security/selinux/include/netport.h | 2 + security/selinux/include/policycap.h | 2 +- security/selinux/include/policycap_names.h | 2 +- security/selinux/include/security.h | 4 ++ security/selinux/include/xfrm.h | 2 + security/selinux/nlmsgtab.c | 12 ++-- security/selinux/selinuxfs.c | 8 ++- security/selinux/ss/avtab.c | 20 +++---- security/selinux/ss/policydb.c | 36 +++++------- security/selinux/ss/services.c | 47 ++++++++------- 25 files changed, 144 insertions(+), 115 deletions(-)