Linus,
We've got twelve patches queued for v5.19, with most being fairly
minor. The highlights are below:
- The checkreqprot and runtime disable knobs have been deprecated for
some time with no active users that we can find. In an effort to move
things along we are adding a pause when the knobs are used to help
make the deprecation more noticeable in case anyone is still using
these hacks in the shadows.
- We've added the anonymous inode class name to the AVC audit records
when anonymous inodes are involved. This should make writing policy
easier when anonymous inodes are involved.
- More constification work. This is fairly straightforward and the
source of most of the diffstat.
- The usual minor cleanups: remove unnecessary assignments, assorted
style/checkpatch fixes, kdoc fixes, macro while-loop encapsulations,
#include tweaks, etc.
Please merge for v5.19.
-Paul
--
The following changes since commit 3123109284176b1532874591f7c81f3837bbdc17:
Linux 5.18-rc1 (2022-04-03 14:08:21 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
tags/selinux-pr-20220523
for you to fetch changes up to 1af0e4a0233fea7e8226cb977d379dc20f9bbe11:
security: declare member holding string literal const
(2022-05-13 14:51:06 -0400)
----------------------------------------------------------------
selinux/stable-5.19 PR 20220523
----------------------------------------------------------------
Christian Göttsche (8):
selinux: resolve checkpatch errors
selinux: update parameter documentation
selinux: avoid extra semicolon
selinux: include necessary headers in headers
selinux: fix indentation level of mls_ops block
selinux: declare data arrays const
selinux: log anon inode class name
security: declare member holding string literal const
Michal Orzel (1):
selinux: Remove redundant assignments
Paul Moore (3):
selinux: runtime disable is deprecated, add some ssleep() discomfort
selinux: checkreqprot is deprecated, add some ssleep() discomfort
selinux: don't sleep when
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is true
include/linux/lsm_audit.h | 2 +
include/linux/lsm_hooks.h | 4 +-
scripts/selinux/genheaders/genheaders.c | 75 ++++++++++++--------
scripts/selinux/mdp/mdp.c | 4 +-
security/lsm_audit.c | 3 +
security/security.c | 2 +-
security/selinux/avc.c | 6 +-
security/selinux/hooks.c | 9 +--
security/selinux/include/audit.h | 5 +-
security/selinux/include/avc.h | 1 +
security/selinux/include/avc_ss.h | 4 +-
security/selinux/include/classmap.h | 2 +-
security/selinux/include/ibpkey.h | 2 +
security/selinux/include/initial_sid_to_string.h | 3 +-
security/selinux/include/netnode.h | 2 +
security/selinux/include/netport.h | 2 +
security/selinux/include/policycap.h | 2 +-
security/selinux/include/policycap_names.h | 2 +-
security/selinux/include/security.h | 4 ++
security/selinux/include/xfrm.h | 2 +
security/selinux/nlmsgtab.c | 12 ++--
security/selinux/selinuxfs.c | 8 ++-
security/selinux/ss/avtab.c | 20 +++----
security/selinux/ss/policydb.c | 36 +++++-------
security/selinux/ss/services.c | 47 ++++++++-------
25 files changed, 144 insertions(+), 115 deletions(-)
--
paul-moore.com
