Re: SELinux userspace 3.6 release - the current status and plan

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Nov 1, 2023 at 8:39 AM Petr Lautrbach <lautrbach@xxxxxxxxxx> wrote:
>
> Hello,
>
> it's been some time [1] since we released 3.5 so it's time to start with
> 3.6
>
> [1] https://lore.kernel.org/selinux/87v8auhbr6.fsf@xxxxxxxxxx/T/#t
>
> Currently we have about 153 merged changes and about 39 changes waiting
> for review or to be merged.
>
> You can see waiting queue at
>
> https://patchwork.kernel.org/project/selinux/list/?series=&submitter=&state=&q=&archive=&delegate=82149
>
> # Series:
>
> ## [RFC,1/9] libselinux: annotate interfaces with compiler attributes
>
> https://patchwork.kernel.org/project/selinux/list/?series=747047&submitter=&state=*&q=&archive=&delegate=
>
> Given that some patches were already rejected, I guess that the whole set could be considered as rejected as well.
>

Yes.

> ## [1/5] libsepol: free memory on str_read() failures
>
> https://patchwork.kernel.org/project/selinux/list/?series=765423&submitter=&state=*&q=&archive=&delegate=
>
> Based on https://lore.kernel.org/all/CAP+JOzQ-AuM9M3c4ehKYca-eUAOy0wbVGkygkpPkhhSTNaVC-Q@xxxxxxxxxxxxxx/ I've marked them as "not applicable"
>

Yes, nothing necessarily wrong with the patches, but they would need
to be updated and resubmitted.

> ## libselinux: rework selabel_file(5) database
>
> https://patchwork.kernel.org/project/selinux/list/?series=775966&submitter=&state=*&q=&archive=&delegate=
>
> Given that the majority was already accepted/merged, the rest could be considered as rejected.
> If there's no objection I'll mark them before the release.
>

I am very hesitant about the selabel patches. I have never been
involved with the selablel code before and I am very worried about
potential ordering changes leading to labeling problems.
I would be ok with Christian updating them and resubmitting them after
this release. I am willing to review the code, but I really need some
other people to test them before I would be ready to merge them.

> ## [1/5] libsepol: include length squared in hashtab_hash_eval()
>
> https://patchwork.kernel.org/project/selinux/list/?series=776635
>
> no response yet
>

I never saw this patch series. I got kicked off the mailing list at
one point and had to resubscribe. I went through the archives, but
must have missed this series.
I'll take a look at it.

> ## CIL Cleanups and Improved Argument handling
>
> https://patchwork.kernel.org/project/selinux/list/?series=788225
>
> There's Reviewed-by and Acked-by attached to the first patch but I guess that it applies to the whole serie.
> If it's not merged before the release and there's no other objection, I'll merge it.
>

Sounds good to me.

Thanks,
Jim

>
>
> The rest are individual patches which are already acked or waiting for review.
>
>
> # Plan
>
> During this week, I'll prepare update of translations from fedora weblate and I'll prepare pre-release list of highlights for this release.
>
> I'd like to start with rc1 during next week and then do rc releases every other week (14 days)
>
>
> Please let me know if there's any objection or if you think that we should wait for somethig or if you want to have seomthing in release notes.
>
>
> Thanks,
>
> Petr
>
>
>
>
>
>




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux