From patchwork Tue Mar 5 22:17:30 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paul Moore X-Patchwork-Id: 10840155 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 7AC2C14DE for ; Tue, 5 Mar 2019 22:17:46 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 681102C504 for ; Tue, 5 Mar 2019 22:17:46 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 595282CEE5; Tue, 5 Mar 2019 22:17:46 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-7.9 required=2.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,MAILING_LIST_MULTI,RCVD_IN_DNSWL_HI autolearn=ham version=3.3.1 Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id E5D342C504 for ; Tue, 5 Mar 2019 22:17:45 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728222AbfCEWRo (ORCPT ); Tue, 5 Mar 2019 17:17:44 -0500 Received: from mail-lf1-f66.google.com ([209.85.167.66]:40702 "EHLO mail-lf1-f66.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726367AbfCEWRn (ORCPT ); Tue, 5 Mar 2019 17:17:43 -0500 Received: by mail-lf1-f66.google.com with SMTP id a8so7375873lfi.7 for ; Tue, 05 Mar 2019 14:17:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=gycZSpHeEzm9Bb+y6ZInD4EPay3X1lr+WOAbT2jGc3w=; b=jnz0IGkDAH3EbUDaoZRjIOIEFDuv5NkUhJiEvdccT9ZFXoGek84jVvPWz62nB56xzt u7jWaFQPXkmeXoHX3aJIwIoOl3odyEtLJ7AOWwB/Qe7xgOX/e9csreQ1Ix9r5lgjVlV+ nELWXUq0Fb/BnX925sGYRn2GzV082ZO5evwAZFpw0pA9m8VusSmeW+TIlClYT3qZUV8/ 2PHujH5ycFO4yAihsmEmumLXVtdtq23UAGVLJXnzt0VRMO6llxqMPiBNT+SW76QFLaZR 3YaoNBpMTvSN+lGWpW2AHN28OOqBqmS//AM4tYP8YnRRVdpo9/wDjrpO8GdKvmstBJup 5Zhg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=gycZSpHeEzm9Bb+y6ZInD4EPay3X1lr+WOAbT2jGc3w=; b=c4R8jOOqdaxDPnmG5Ka7CidB/AfqW3Enu7GgwdliREARN/6RjZD+LejSMnPEswcPoG wn0wKLyjeukTKDzgWF29M9kgolFeGVcNpJTbzrwCH6SW8Kn8+rWCCiX0Xd8i/Bvpi0tq S/kiTaBcwmYEQ/NzVW1+0BP8IyXeKnOVm9cpQgt/vuDfvPrDUYC1DfJVqXUp4PEDtmlA oQeJu4PMOeg9IG3KO3jCBNF7n29KsYEJXQI73K++bXyq7JmOKOM2pTyWyQgTGmdJHFXh kVGMaV6WeMi6MS6se727o9PeX2aYudHqguhGYSvvGcDtJzvkdgaNDQavRRTlHhcyVtVs Y46w== X-Gm-Message-State: APjAAAVLlJ1IOlaWRU5pTzHertWyBzmYAKxAqRACISQyN64uz57pyKKb YsyU+XiMY5JPkQkILRhlsoC/VwL9DfC69l/INYbEWrTWIA== X-Google-Smtp-Source: APXvYqz+rQBVNGS/1z9Vj6Y6ApudFtOTIYLDjwQEImtklgp7JGieOFj+YbzWRUPkHSuW+sDikWUng7YJe8jq6KrE5Ek= X-Received: by 2002:ac2:55b2:: with SMTP id y18mr2020169lfg.72.1551824261666; Tue, 05 Mar 2019 14:17:41 -0800 (PST) MIME-Version: 1.0 From: Paul Moore Date: Tue, 5 Mar 2019 17:17:30 -0500 Message-ID: Subject: [GIT PULL] SELinux patches for v5.1 To: Linus Torvalds Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Sender: selinux-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux@vger.kernel.org X-Virus-Scanned: ClamAV using ClamSMTP Hi Linus, Nine SELinux patches for v5.1, all bug fixes. As far as I'm concerned, nothing really jumps out as risky or special to me, but each commit has a decent description so you can judge for yourself. As usual, everything passes the selinux-testsuite; please merge for v5.1. Thanks, -Paul --- The following changes since commit bfeffd155283772bbe78c6a05dec7c0128ee500c: Linux 5.0-rc1 (2019-01-06 17:08:20 -0800) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20190305 for you to fetch changes up to 45189a1998e00f6375ebd49d1e18161acddd73de: selinux: fix avc audit messages (2019-02-05 12:34:33 -0500) ---------------------------------------------------------------- selinux/stable-5.1 PR 20190305 ---------------------------------------------------------------- Ondrej Mosnacek (6): selinux: never allow relabeling on context mounts selinux: do not override context on context mounts selinux: inline some AVC functions used only once selinux: replace some BUG_ON()s with a WARN_ON() selinux: log invalid contexts in AVCs selinux: replace BUG_ONs with WARN_ONs in avc.c Stephen Smalley (3): selinux: avoid silent denials in permissive mode under RCU walk selinux: stop passing MAY_NOT_BLOCK to the AVC upon follow_link selinux: fix avc audit messages security/selinux/avc.c | 199 +++++++++++++++++------------------- security/selinux/hooks.c | 58 ++++++++--- security/selinux/include/avc.h | 6 +- security/selinux/include/security.h | 3 + security/selinux/ss/services.c | 37 ++++++- 5 files changed, 176 insertions(+), 127 deletions(-)