From: Paul Moore <paul@paul-moore.com>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org,
linux-kernel@vger.kernel.org
Subject: [GIT PULL] selinux/selinux-pr-20260805
Date: Wed, 05 Aug 2026 16:24:35 -0400 [thread overview]
Message-ID: <e8381f47156a6d70a99d5a3c24286662@paul-moore.com> (raw)
Linus,
Eight SELinux patches for the next v7.2-rcX release, a quick summary
below:
- Continue to improve the validation of SELinux policies during load
- Fix a SELinux regression caused by bpffs changes in v7.2-rc1
- Fix a SELinux preformance regression caused by SELinux changes in v7.2-rc1
Paul
--
The following changes since commit f5098b6bae761e346ebcd9da7f95622c04733cff:
Linux 7.2-rc5 (2026-07-26 14:45:48 -0700)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
tags/selinux-pr-20260805
for you to fetch changes up to 9c1cc4a7f79275ef93746f6247685763b475bfb0:
selinux: check level category sets once at load time
(2026-08-04 10:57:46 -0400)
----------------------------------------------------------------
selinux/stable-7.2 PR 20260805
----------------------------------------------------------------
Bryam Vargas (6):
selinux: reject a permission value exceeding the class permission
count
selinux: reject a class permission count below its inherited
common
selinux: do not cancel a policy conversion that never started
selinux: require a class's permission values to cover its
permission count
selinux: reject an unclaimed class value in security_get_classes()
selinux: require every boolean value to be defined
Carlos Llamas (1):
selinux: bpf: check SBLABEL_MNT before isec init
Stephen Smalley (1):
selinux: check level category sets once at load time
security/selinux/hooks.c | 8 +-
security/selinux/ss/mls.c | 24 ++-----
security/selinux/ss/policydb.c | 108 +++++++++++++++++++++++++++++++--
security/selinux/ss/services.c | 28 ++++++--
4 files changed, 136 insertions(+), 32 deletions(-)
--
paul-moore.com
next reply other threads:[~2026-08-05 20:24 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-05 20:24 Paul Moore [this message]
2026-08-06 16:01 ` [GIT PULL] selinux/selinux-pr-20260805 pr-tracker-bot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=e8381f47156a6d70a99d5a3c24286662@paul-moore.com \
--to=paul@paul-moore.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=selinux@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox