This series contains a patch that fixes broken conditional AV list duplication introduced by c7c556f1e81b ("selinux: refactor changing booleans") and a couple "and while I'm here..." cleanup patches on top. Ondrej Mosnacek (3): selinux: fix cond_list corruption when changing booleans selinux: simplify duplicate_policydb_cond_list() by using kmemdup() selinux: constify some avtab function arguments security/selinux/ss/avtab.c | 118 +++++++++++------------------- security/selinux/ss/avtab.h | 18 +++-- security/selinux/ss/conditional.c | 26 ++++--- 3 files changed, 65 insertions(+), 97 deletions(-) -- 2.30.2