Hi Linus, Seven SELinux patches for v6.7, the highlights are below: * Improve the SELinux debugging configuration controls in Kconfig. * Print additional information about the hash table chain lengths when when printing SELinux debugging information. * Simplify the SELinux access vector hash table calcaulations. * Use a better hashing function for the SELinux role tansition hash table. * Improve SELinux load policy time through the use of optimized functions for calculating the number of bits set in a field. * Addition of a __counted_by annotation. * Simplify the avtab_inert_node() function through a simplified prototype. Please merge for v6.7-rc1, thanks. -Paul -- The following changes since commit 0bb80ecc33a8fb5a682236443c1e740d5c917d1d: Linux 6.6-rc1 (2023-09-10 16:28:41 -0700) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20231030 for you to fetch changes up to 19c1c9916dbf9b05157a0c4970f61f952c0cb86a: selinux: simplify avtab_insert_node() prototype (2023-10-03 17:07:07 -0400) ---------------------------------------------------------------- selinux/stable-6.7 PR 20231030 ---------------------------------------------------------------- Christian Göttsche (4): selinux: print sum of chain lengths^2 for hash tables selinux: improve debug configuration selinux: simplify avtab slot calculation selinux: improve role transition hashing Jacob Satterfield (2): selinux: hweight optimization in avtab_read_item selinux: simplify avtab_insert_node() prototype Kees Cook (1): selinux: Annotate struct sidtab_str_cache with __counted_by security/selinux/Kconfig | 10 ++++++++++ security/selinux/Makefile | 2 ++ security/selinux/ss/avtab.c | 37 +++++++++++-------------------------- security/selinux/ss/hashtab.c | 5 +++++ security/selinux/ss/hashtab.h | 1 + security/selinux/ss/policydb.c | 6 +++--- security/selinux/ss/sidtab.c | 2 +- 7 files changed, 33 insertions(+), 30 deletions(-) -- paul-moore.com
