Re: SELinux userspace 3.6 release - the current status and plan

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Nov 1, 2023 at 9:51 AM James Carter <jwcart2@xxxxxxxxx> wrote:
>
> On Wed, Nov 1, 2023 at 8:39 AM Petr Lautrbach <lautrbach@xxxxxxxxxx> wrote:
> >
> > Hello,
> >
> > it's been some time [1] since we released 3.5 so it's time to start with
> > 3.6
> >
> > [1] https://lore.kernel.org/selinux/87v8auhbr6.fsf@xxxxxxxxxx/T/#t
> >
> > Currently we have about 153 merged changes and about 39 changes waiting
> > for review or to be merged.
> >
> > You can see waiting queue at
> >
> > https://patchwork.kernel.org/project/selinux/list/?series=&submitter=&state=&q=&archive=&delegate=82149
> >
> > # Series:
> >
> > ## [RFC,1/9] libselinux: annotate interfaces with compiler attributes
> >
> > https://patchwork.kernel.org/project/selinux/list/?series=747047&submitter=&state=*&q=&archive=&delegate=
> >
> > Given that some patches were already rejected, I guess that the whole set could be considered as rejected as well.
> >
>
> Yes.
>
> > ## [1/5] libsepol: free memory on str_read() failures
> >
> > https://patchwork.kernel.org/project/selinux/list/?series=765423&submitter=&state=*&q=&archive=&delegate=
> >
> > Based on https://lore.kernel.org/all/CAP+JOzQ-AuM9M3c4ehKYca-eUAOy0wbVGkygkpPkhhSTNaVC-Q@xxxxxxxxxxxxxx/ I've marked them as "not applicable"
> >
>
> Yes, nothing necessarily wrong with the patches, but they would need
> to be updated and resubmitted.
>
> > ## libselinux: rework selabel_file(5) database
> >
> > https://patchwork.kernel.org/project/selinux/list/?series=775966&submitter=&state=*&q=&archive=&delegate=
> >
> > Given that the majority was already accepted/merged, the rest could be considered as rejected.
> > If there's no objection I'll mark them before the release.
> >
>
> I am very hesitant about the selabel patches. I have never been
> involved with the selablel code before and I am very worried about
> potential ordering changes leading to labeling problems.
> I would be ok with Christian updating them and resubmitting them after
> this release. I am willing to review the code, but I really need some
> other people to test them before I would be ready to merge them.
>
> > ## [1/5] libsepol: include length squared in hashtab_hash_eval()
> >
> > https://patchwork.kernel.org/project/selinux/list/?series=776635
> >
> > no response yet
> >
>
> I never saw this patch series. I got kicked off the mailing list at
> one point and had to resubscribe. I went through the archives, but
> must have missed this series.
> I'll take a look at it.
>

I did take a look at it and it looks good.
I tried my best to create a reply to the list, but I was unable to
make any of the suggestions work.
See: https://lore.kernel.org/all/20230816123845.80171-1-cgzones@xxxxxxxxxxxxxx/

If someone could reply to the first email of the series and cc me,
then I can add my ack.

Unless someone has a better suggestion.

Thanks,
Jim


> > ## CIL Cleanups and Improved Argument handling
> >
> > https://patchwork.kernel.org/project/selinux/list/?series=788225
> >
> > There's Reviewed-by and Acked-by attached to the first patch but I guess that it applies to the whole serie.
> > If it's not merged before the release and there's no other objection, I'll merge it.
> >
>
> Sounds good to me.
>
> Thanks,
> Jim
>
> >
> >
> > The rest are individual patches which are already acked or waiting for review.
> >
> >
> > # Plan
> >
> > During this week, I'll prepare update of translations from fedora weblate and I'll prepare pre-release list of highlights for this release.
> >
> > I'd like to start with rc1 during next week and then do rc releases every other week (14 days)
> >
> >
> > Please let me know if there's any objection or if you think that we should wait for somethig or if you want to have seomthing in release notes.
> >
> >
> > Thanks,
> >
> > Petr
> >
> >
> >
> >
> >
> >




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux