From: Paul Moore <pmoore@redhat.com>
To: James Morris <jmorris@namei.org>
Cc: linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov
Subject: [GIT PULL] SELinux patches for 3.16
Date: Thu, 22 May 2014 11:25:33 -0400 [thread overview]
Message-ID: <5872296.eRu4qP8SMB@sifl> (raw)
Hi James,
Here are the SELinux patches for 3.16. A total of four patches: two to fix a
problem when loading policy on slow machines, one to make it easier to
determine permissive mode in the AVC audit messages, and one to block cause
setexeccon() to fail on filesystems mounted with nosuid. None of the patches
are very substantial (see the diffstat below), all pass the SELinux testsuite,
and the branch applied cleanly on top of your current #next.
Enjoy,
-Paul
---
The following changes since commit 6d32c850621b0be75777b9102b14f6268bbd9f0f:
Merge tag 'v3.14' into next (2014-03-31 09:49:07 -0400)
are available in the git repository at:
git://git.infradead.org/users/pcmoore/selinux next
for you to fetch changes up to 47dd0b76ace953bd2c0479076db0d3e3b9594003:
selinux: conditionally reschedule in hashtab_insert while loading selinux
policy (2014-05-15 17:07:55 -0400)
----------------------------------------------------------------
Dave Jones (2):
selinux: conditionally reschedule in mls_convert_context while loading
selinux policy
selinux: conditionally reschedule in hashtab_insert while loading
selinux policy
Paul Moore (1):
selinux: reject setexeccon() on MNT_NOSUID applications with -EACCES
Stephen Smalley (1):
selinux: Report permissive mode in avc: denied messages.
security/selinux/avc.c | 7 ++++++-
security/selinux/hooks.c | 11 +++++++----
security/selinux/include/avc.h | 4 ++--
security/selinux/ss/hashtab.c | 3 +++
security/selinux/ss/mls.c | 2 ++
5 files changed, 20 insertions(+), 7 deletions(-)
--
paul moore
security and virtualization @ redhat
next reply other threads:[~2014-05-22 15:25 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-05-22 15:25 Paul Moore [this message]
2014-05-26 12:38 ` [GIT PULL] SELinux patches for 3.16 James Morris
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5872296.eRu4qP8SMB@sifl \
--to=pmoore@redhat.com \
--cc=jmorris@namei.org \
--cc=linux-security-module@vger.kernel.org \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.