linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Kees Cook <keescook@chromium.org>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: linux-kernel@vger.kernel.org,
	Andrew Donnellan <ajd@linux.ibm.com>,
	Dan Carpenter <dan.carpenter@oracle.com>,
	Erhard Furtner <erhard_f@mailbox.org>,
	James Morris <jmorris@namei.org>,
	Kees Cook <keescook@chromium.org>,
	kernel test robot <lkp@intel.com>,
	linux-security-module@vger.kernel.org,
	Matthias Kaehlcke <mka@chromium.org>,
	"Serge E. Hallyn" <serge@hallyn.com>,
	Yury Norov <yury.norov@gmail.com>
Subject: [GIT PULL] hardening fixes for v6.0-rc2
Date: Fri, 19 Aug 2022 12:01:15 -0700	[thread overview]
Message-ID: <202208191200.C8B461644@keescook> (raw)

Hi Linus,

Please pull these two kernel hardening fixes for v6.0-rc2.

Thanks!

-Kees

The following changes since commit 27603a606fda0806d7c08914bc976931aa42020e:

  dm: verity-loadpin: Drop use of dm_table_get_num_targets() (2022-07-28 21:48:12 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.0-rc2

for you to fetch changes up to 012e8d2034f1bda8863435cd589636e618d6a659:

  gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file (2022-08-16 12:25:53 -0700)

----------------------------------------------------------------
hardening fixes for v6.0-rc2

- Also undef LATENT_ENTROPY_PLUGIN for per-file disabling (Andrew Donnellan)

- Return EFAULT on copy_from_user() failures in LoadPin (Kees Cook)

----------------------------------------------------------------
Andrew Donnellan (1):
      gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file

Kees Cook (1):
      LoadPin: Return EFAULT on copy_from_user() failures

 scripts/Makefile.gcc-plugins | 2 +-
 security/loadpin/loadpin.c   | 6 ++----
 2 files changed, 3 insertions(+), 5 deletions(-)

-- 
Kees Cook

             reply	other threads:[~2022-08-19 19:01 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-08-19 19:01 Kees Cook [this message]
2022-08-19 21:14 ` [GIT PULL] hardening fixes for v6.0-rc2 pr-tracker-bot

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=202208191200.C8B461644@keescook \
    --to=keescook@chromium.org \
    --cc=ajd@linux.ibm.com \
    --cc=dan.carpenter@oracle.com \
    --cc=erhard_f@mailbox.org \
    --cc=jmorris@namei.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=lkp@intel.com \
    --cc=mka@chromium.org \
    --cc=serge@hallyn.com \
    --cc=torvalds@linux-foundation.org \
    --cc=yury.norov@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).