[GIT PULL] SELinux patches for 3.16

[GIT PULL] SELinux patches for 3.16

[Paul Moore]

Hi James,

Here are the SELinux patches for 3.16.  A total of four patches: two to fix a 
problem when loading policy on slow machines, one to make it easier to 
determine permissive mode in the AVC audit messages, and one to block cause 
setexeccon() to fail on filesystems mounted with nosuid.  None of the patches 
are very substantial (see the diffstat below), all pass the SELinux testsuite, 
and the branch applied cleanly on top of your current #next.

Enjoy,
-Paul

---
The following changes since commit 6d32c850621b0be75777b9102b14f6268bbd9f0f:

  Merge tag 'v3.14' into next (2014-03-31 09:49:07 -0400)

are available in the git repository at:

  git://git.infradead.org/users/pcmoore/selinux next

for you to fetch changes up to 47dd0b76ace953bd2c0479076db0d3e3b9594003:

  selinux: conditionally reschedule in hashtab_insert while loading selinux
           policy (2014-05-15 17:07:55 -0400)

----------------------------------------------------------------
Dave Jones (2):
      selinux: conditionally reschedule in mls_convert_context while loading 
               selinux policy
      selinux: conditionally reschedule in hashtab_insert while loading 
               selinux policy

Paul Moore (1):
      selinux: reject setexeccon() on MNT_NOSUID applications with -EACCES

Stephen Smalley (1):
      selinux:  Report permissive mode in avc: denied messages.

 security/selinux/avc.c         |  7 ++++++-
 security/selinux/hooks.c       | 11 +++++++----
 security/selinux/include/avc.h |  4 ++--
 security/selinux/ss/hashtab.c  |  3 +++                                        
 security/selinux/ss/mls.c      |  2 ++                                         
 5 files changed, 20 insertions(+), 7 deletions(-)

-- 
paul moore
security and virtualization @ redhat

Re: [GIT PULL] SELinux patches for 3.16

[James Morris]

On Thu, 22 May 2014, Paul Moore wrote:

> Hi James,
> 
> Here are the SELinux patches for 3.16.  A total of four patches: two to fix a 
> problem when loading policy on slow machines, one to make it easier to 
> determine permissive mode in the AVC audit messages, and one to block cause 
> setexeccon() to fail on filesystems mounted with nosuid.  None of the patches 
> are very substantial (see the diffstat below), all pass the SELinux testsuite, 
> and the branch applied cleanly on top of your current #next.
> 
> Enjoy,
> -Paul
> 
> ---
> The following changes since commit 6d32c850621b0be75777b9102b14f6268bbd9f0f:
> 
>   Merge tag 'v3.14' into next (2014-03-31 09:49:07 -0400)
> 
> are available in the git repository at:
> 
>   git://git.infradead.org/users/pcmoore/selinux next

Thanks, pulled.


-- 
James Morris
<jmorris@namei.org>