public inbox for stable@vger.kernel.org
 help / color / mirror / Atom feed
From: Alexander Grund <theflamefire89@gmail.com>
To: stable@vger.kernel.org
Cc: Alexander Grund <theflamefire89@gmail.com>
Subject: [PATCH 4.9 0/6] Convert isec->lock into a spinlock fixing deadlock on GFS2
Date: Sat, 30 Jul 2022 19:03:37 +0200	[thread overview]
Message-ID: <20220730170343.11477-1-theflamefire89@gmail.com> (raw)

This patchset backports basically upstream commit 9287aed2
(selinux: Convert isec->lock into a spinlock). This
"fixes a deadlock between selinux and GFS2 when GFS2 invalidates a security label",
see the original discussion at
https://lore.kernel.org/all/1478812710-17190-2-git-send-email-agruenba@redhat.com/T/
It also contains the follow-up fixes to make this correct.

The first 3 commits (by Andreas) are valuable on their own too as
they fix a documentation bug, avoid partially initialized structs
and (slightly) improve performance while making the code cleaner.

Andreas Gruenbacher (4):
  selinux: Minor cleanups
  proc: Pass file mode to proc_pid_make_inode
  selinux: Clean up initialization of isec->sclass
  selinux: Convert isec->lock into a spinlock

Paul Moore (1):
  selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling

Tianyue Ren (1):
  selinux: fix error initialization in inode_doinit_with_dentry()

 fs/proc/base.c                    |  23 +++---
 fs/proc/fd.c                      |   6 +-
 fs/proc/internal.h                |   2 +-
 fs/proc/namespaces.c              |   3 +-
 security/selinux/hooks.c          | 123 +++++++++++++++++++-----------
 security/selinux/include/objsec.h |   5 +-
 security/selinux/selinuxfs.c      |   4 +-
 7 files changed, 96 insertions(+), 70 deletions(-)

-- 
2.25.1


             reply	other threads:[~2022-07-30 17:04 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-07-30 17:03 Alexander Grund [this message]
2022-07-30 17:03 ` [PATCH 4.9 1/6] selinux: Minor cleanups Alexander Grund
2022-07-30 17:03 ` [PATCH 4.9 2/6] proc: Pass file mode to proc_pid_make_inode Alexander Grund
2022-07-30 17:03 ` [PATCH 4.9 3/6] selinux: Clean up initialization of isec->sclass Alexander Grund
2022-07-30 17:03 ` [PATCH 4.9 4/6] selinux: Convert isec->lock into a spinlock Alexander Grund
2022-07-30 17:03 ` [PATCH 4.9 5/6] selinux: fix error initialization in inode_doinit_with_dentry() Alexander Grund
2022-07-30 17:03 ` [PATCH 4.9 6/6] selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling Alexander Grund
2022-08-01 11:14 ` [PATCH 4.9 0/6] Convert isec->lock into a spinlock fixing deadlock on GFS2 Greg KH

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20220730170343.11477-1-theflamefire89@gmail.com \
    --to=theflamefire89@gmail.com \
    --cc=stable@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox