From patchwork Wed Jun 12 20:59:05 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Moore X-Patchwork-Id: 10990885 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id B3D7914E5 for ; Wed, 12 Jun 2019 20:59:24 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id A42CE28AD6 for ; Wed, 12 Jun 2019 20:59:24 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 982C128AD9; Wed, 12 Jun 2019 20:59:24 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-7.9 required=2.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,MAILING_LIST_MULTI,RCVD_IN_DNSWL_HI autolearn=ham version=3.3.1 Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 87D6628AD7 for ; Wed, 12 Jun 2019 20:59:23 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2389744AbfFLU7T (ORCPT ); Wed, 12 Jun 2019 16:59:19 -0400 Received: from mail-lj1-f173.google.com ([209.85.208.173]:38350 "EHLO mail-lj1-f173.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2389466AbfFLU7T (ORCPT ); Wed, 12 Jun 2019 16:59:19 -0400 Received: by mail-lj1-f173.google.com with SMTP id o13so16381050lji.5 for ; Wed, 12 Jun 2019 13:59:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=l3VEyWUIpz19ynNy/N2qHdEiDLqpzuYJDD7NorzZ7xc=; b=N2HZ4/L5uWJ8QNMKDSq0FO7tTwa7rTy4QL45jcK35gfpeeQw2qQZq01cIdQtxhG41D 2568TNO1fhu46tbEeVx1JoKSvpG1NG9yKiBzsUnlaQvbSXsi6kG+f2qTAtU1drEbSEiF xcRbsYkmZVCjE/j1Xzk7FxQ8fm+layLakyIpAGLaBKzo1aPTI036n5Lhdb+eYBvzyQl8 FxcUURBFsI0JNdOrhm5UA7otbbT2VU9ymTBIkZfejGahJUObQ6EIu5+7f0odQKDyGGJi Odpv5uATkGYtakdyOZfZwZb1ly1DEEjcIt5Lkko583FlfQtaHO+57aosTnFqar5y8tky 2RdQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=l3VEyWUIpz19ynNy/N2qHdEiDLqpzuYJDD7NorzZ7xc=; b=tXFQixg7RYO4ptvdhBOfFJyu1E9gUVztkUTGoRulCggmbBOPfQN+mwp51DVVCwjDnh ZFfziwmO4n7sv2ys5c9PGGs40idm1WAgc6tIUhUAYaAKacywCTTRNGBdf6mbgL2qJl/G Rlxso8l917AwwvjDAd8JUt+40Kr95FcJaJsYFwy+RW6ejQcdN81OeA0h/OEFEo4Yfrrr WWdHgVhMCSCZFIp4QA1GNLCLZmWZoWg07tG7RJ43tfUAoGYkczY+dsV1OS0ngErGkXdg 1Z4g4+FVVZ02vlyaFLFq2ZtJIAfxRs3MSA2hwwKoq6CHsMW3y2aHgKwiwXagLBNaPS1O 7UPA== X-Gm-Message-State: APjAAAVuRYO9xnZUuj7qzOZGhbj9ocEW7rb30xm8L0LzyvL0XphD2Rkd PVNo4DRzzOYPN6t1G0WiIUGia8jIjsf+uLTuvB8z X-Google-Smtp-Source: APXvYqyQ9xRqxco6pzmg3Kllok/kjb/RUNCEP+XpYPOK05OKF32F7Ru4shBbfMW+WyLGgAMoWcG0oW76u5p69zhqhcw= X-Received: by 2002:a2e:9106:: with SMTP id m6mr31118354ljg.164.1560373156513; Wed, 12 Jun 2019 13:59:16 -0700 (PDT) MIME-Version: 1.0 From: Paul Moore Date: Wed, 12 Jun 2019 16:59:05 -0400 Message-ID: Subject: [GIT PULL] SELinux fixes for v5.2 (#2) To: Linus Torvalds Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Sender: selinux-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux@vger.kernel.org X-Virus-Scanned: ClamAV using ClamSMTP Hi Linus, Three patches for v5.2; one fixes a problem where we weren't correctly logging raw SELinux labels, the other two fix problems where we weren't properly checking calls to kmemdup(). Please merge for the next v5.2-rc release. Thanks, -Paul --- The following changes since commit 05174c95b83f8aca0c47b87115abb7a6387aafa5: selinux: do not report error on connect(AF_UNSPEC) (2019-05-20 21:46:02 -0400) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20190612 for you to fetch changes up to fec6375320c6399c708fa9801f8cfbf950fee623: selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts() (2019-06-12 12:27:26 -0400) ---------------------------------------------------------------- selinux/stable-5.2 PR 20190612 ---------------------------------------------------------------- Gen Zhang (2): selinux: fix a missing-check bug in selinux_add_mnt_opt( ) selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts() Ondrej Mosnacek (1): selinux: log raw contexts as untrusted strings security/selinux/avc.c | 10 ++++++++-- security/selinux/hooks.c | 39 ++++++++++++++++++++++++++++----------- 2 files changed, 36 insertions(+), 13 deletions(-)