From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oo1-f46.google.com (mail-oo1-f46.google.com [209.85.161.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0CDC146449 for ; Tue, 12 Mar 2024 23:18:27 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.161.46 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1710285509; cv=none; b=UOYdDWOhtYvF5sAUHByXS7Zbai/qsAtNW2iZBqfe9BNblb1vFdWbFDUu1ikY1WfU7ihmZYgc5glxPquTnRfzm56jvGGjlxKCIvJq5wwecaFGGpVjXQU6zsIMPkb4ruBT1eh8YDp87cv6kf8QGRf90oVhwQh2JXaEpvvwLDdRha0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1710285509; c=relaxed/simple; bh=q39NurgIHCOT4qDzjQ4+UPaZ8eobe8ngIwBFL/onrQs=; h=Date:Message-ID:From:To:Cc:Subject; b=RZ0IuAh93LcXNtKRPeyZb+dP8SirRzccZ7koCxMBK7Zqd+P8YQ97aDvHJ2c5xdjriJ6BFpXTUa4r1gII60sVsxXJxobOyimsOX2c3b7c7WLnttw3AyBB+uYS4OBOkTh8TtKbU16nElengdCoXTlTymtRSrOcq/R4OXYy0zkMnr0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=IlqU9ob9; arc=none smtp.client-ip=209.85.161.46 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="IlqU9ob9" Received: by mail-oo1-f46.google.com with SMTP id 006d021491bc7-5a0e5f083f1so282388eaf.1 for ; Tue, 12 Mar 2024 16:18:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1710285507; x=1710890307; darn=vger.kernel.org; h=subject:cc:to:from:message-id:date:from:to:cc:subject:date :message-id:reply-to; bh=ODZOS4ijNm0/2adr74Or0gSBtAKP6h+U6y8x5b0LRUw=; b=IlqU9ob9nM29aBlyNTRHy9g4eoFB1UXjTd5CcH0kwS0tDgDpscH07VWUjAUacgDGGQ NF+/VhNg8jgSKnGKzcHtO3MO6LtPOksacBYiokCTdAysJaAfU9QqONU6ZuiPfVSG9jhT vR6A7Lp3PO58Wdmh/AVlys0oNIzGuLjfwy8aZDrnKkomZ10qJ4J2Ln1YgMo2SPuFvA6e rokER93JPuXDLT51pKeZ3FYRjL2QT/OkUO6nw8YFRjxmsRVK9AHb4o3nwlhvQyr/Hu9f KUy1wq28cJ4aYsjIpGwMRvwAyjKlusW2AVxkL5eZW3rBNJLzfiSKSF52/QxeAm9KNtIi AXlw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710285507; x=1710890307; h=subject:cc:to:from:message-id:date:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=ODZOS4ijNm0/2adr74Or0gSBtAKP6h+U6y8x5b0LRUw=; b=ugedGpKmKodiqupeVl4VnRIbVC+O9LHhjseqZnFDDQ96ftWUVr5X6s5M2FJ6dG1d79 5dWNbhNRty2dw/9djpqrfiE3J3U821bRPTj9CA+I9Hf2f+tcHKG9rrM3tNQpJERsZuXD DCMKqPA9WmmXvXjNRS2jrmQO0Es704vYAVukkO+hs4dG+Un8W+prxE49ygnvlgXk4w9/ aGtedWyavxJvYfHMLnkwe8joacGjhGk6MyzixrcCpkMmbEiIavmyf7DtelICFnGtg4/X oZgvsz1KV/H7WnkxWix3AdXJqegYumH2MkPncIvnKH9P+xRjSPAi0XOtJTeAJBLJQVxJ 2Qdw== X-Forwarded-Encrypted: i=1; AJvYcCXGlsL/13vZslcFGLd3eFAlgUDFbCjP/LrMAeLP2kwAz6PXj4stbTrbFGrHIkLUBrmcwBCvh8B4PGe4MtmpHdXiEtplIHpuZOO4WpUcZ5X950WdIYbn X-Gm-Message-State: AOJu0YylQ6Pk7PHb2qDSXozbEkr2XrFh6omx28duAwon903X6ZwDZLVN LG05SIQVpSvlt3q619W5lru9YZxnNVr9/uY1My2JQ4OGtUKtzNU2zkAf3TTgTA== X-Google-Smtp-Source: AGHT+IE/A50saUIS2DU+jf2y6h4ZR3UoebNxqmu2cL/8eRDB6toXSOlnwm7IByHka4/goR5f3+ORAA== X-Received: by 2002:a05:6808:a0b:b0:3c2:261c:7829 with SMTP id n11-20020a0568080a0b00b003c2261c7829mr4258326oij.52.1710285507128; Tue, 12 Mar 2024 16:18:27 -0700 (PDT) Received: from localhost ([70.22.175.108]) by smtp.gmail.com with ESMTPSA id dw15-20020a0562140a0f00b0069102f97e08sm554827qvb.97.2024.03.12.16.18.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 12 Mar 2024 16:18:26 -0700 (PDT) Date: Tue, 12 Mar 2024 19:18:26 -0400 Message-ID: From: Paul Moore To: Linus Torvalds Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [GIT PULL] selinux/selinux-pr-20240312 Precedence: bulk X-Mailing-List: linux-security-module@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Hi Linus, There are a number of SELinux patches for the Linux v6.9 merge window, but as you'll see there are really only a few notable changes: - Continue the coding style/formatting fixup work This is the bulk of the diffstat in this pull request, with the focus this time around being the security/selinux/ss directory. We've only got a couple of files left to cleanup and once we're done with that we can start enabling some automatic style verfication and introduce tooling to help new folks format their code correctly. - Don't restrict xattr copy-up when SELinux policy is not loaded This helps systems that use overlayfs, or similar filesystems, preserve their SELinux labels during early boot when the SELinux policy has yet to be loaded. - Reduce the work we do during inode initialization time This isn't likely to show up in any benchmark results, but we removed an unnecessary SELinux object class lookup/calculation during inode initialization. - Correct the return values in selinux_socket_getpeersec_dgram() We had some inconsistencies with respect to our return values across selinux_socket_getpeersec_dgram() and selinux_socket_getpeersec_stream(). This pull request provides a more uniform set of error codes across the two functions and should help make it easier for users to identify the source of a failure. Please merge when you have the chance, -Paul -- The following changes since commit 6613476e225e090cc9aad49be7fa504e290dd33d: Linux 6.8-rc1 (2024-01-21 14:11:32 -0800) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20240312 for you to fetch changes up to a1fc79343abbdc5bebb80c2a9032063442df8b59: selinux: fix style issues in security/selinux/ss/symtab.c (2024-02-23 17:26:09 -0500) ---------------------------------------------------------------- selinux/stable-6.9 PR 20240312 ---------------------------------------------------------------- David Disseldorp (1): selinux: only filter copy-up xattrs following initialization Paul Moore (23): selinux: reduce the object class calculations at inode init time selinux: correct return values in selinux_socket_getpeersec_dgram() selinux: fix style issues in security/selinux/ss/avtab.h selinux: fix style issues in security/selinux/ss/avtab.c selinux: fix style issues in security/selinux/ss/conditional.h selinux: fix style issues in security/selinux/ss/conditional.c selinux: fix style issues in security/selinux/ss/constraint.h selinux: fix style issues in security/selinux/ss/context.h selinux: fix style issues in security/selinux/ss/context.h selinux: fix style issues in security/selinux/ss/ebitmap.h selinux: fix style issues in security/selinux/ss/ebitmap.c selinux: fix style issues in security/selinux/ss/hashtab.h selinux: fix style issues in security/selinux/ss/hashtab.c selinux: fix style issues in security/selinux/ss/mls.h selinux: fix style issues in security/selinux/ss/mls.c selinux: fix style issues in security/selinux/ss/mls_types.h selinux: fix style issues in security/selinux/ss/policydb.h selinux: fix style issues in security/selinux/ss/policydb.c selinux: fix style issues in security/selinux/ss/services.h selinux: fix style issues in security/selinux/ss/sidtab.h selinux: fix style issues in security/selinux/ss/sidtab.c selinux: fix style issues in security/selinux/ss/symtab.h selinux: fix style issues in security/selinux/ss/symtab.c security/selinux/hooks.c | 28 +-- security/selinux/ss/avtab.c | 105 +++++----- security/selinux/ss/avtab.h | 74 +++---- security/selinux/ss/conditional.c | 68 ++++--- security/selinux/ss/conditional.h | 23 ++- security/selinux/ss/constraint.h | 61 +++--- security/selinux/ss/context.c | 2 +- security/selinux/ss/context.h | 41 ++-- security/selinux/ss/ebitmap.c | 56 +++--- security/selinux/ss/ebitmap.h | 42 ++-- security/selinux/ss/hashtab.c | 23 ++- security/selinux/ss/hashtab.h | 35 ++-- security/selinux/ss/mls.c | 83 ++++---- security/selinux/ss/mls.h | 58 ++---- security/selinux/ss/mls_types.h | 32 +-- security/selinux/ss/policydb.c | 405 ++++++++++++++++++++------------------ security/selinux/ss/policydb.h | 192 +++++++++--------- security/selinux/ss/services.h | 3 +- security/selinux/ss/sidtab.c | 69 ++++--- security/selinux/ss/sidtab.h | 36 ++-- security/selinux/ss/symtab.c | 4 +- security/selinux/ss/symtab.h | 9 +- 22 files changed, 721 insertions(+), 728 deletions(-) -- paul-moore.com