From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <stable-owner@vger.kernel.org>
Received: from userp1040.oracle.com ([156.151.31.81]:40377 "EHLO
	userp1040.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
	with ESMTP id S932772AbbGHPzY (ORCPT
	<rfc822;stable@vger.kernel.org>); Wed, 8 Jul 2015 11:55:24 -0400
Message-ID: <559D47E7.9050607@oracle.com>
Date: Wed, 08 Jul 2015 11:55:19 -0400
From: Sasha Levin <sasha.levin@oracle.com>
MIME-Version: 1.0
To: Mimi Zohar <zohar@linux.vnet.ibm.com>
CC: stable@vger.kernel.org, stable-commits@vger.kernel.org
Subject: Re: [added to the 3.18 stable tree] KEYS: fix "ca_keys=" partial
 key matching
References: <1435978997-14393-1-git-send-email-sasha.levin@oracle.com>	 <1435978997-14393-29-git-send-email-sasha.levin@oracle.com> <1436294593.3526.14.camel@linux.vnet.ibm.com>
In-Reply-To: <1436294593.3526.14.camel@linux.vnet.ibm.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Sender: stable-owner@vger.kernel.org
List-ID: <stable.vger.kernel.org>

Hi Mimi,

The patches below aren't really stable material:

On 07/07/2015 02:43 PM, Mimi Zohar wrote:
> Hi Sasha,
> 
> Thanks!  The first two patches listed below aren't "necessary", but with
> them the rest of the bug fixes apply cleanly.
> 
> # ima: skip measurement of cgroupfs files and update documentation
> git cherry-pick 6438de9 -x

Doesn't look like this one fixes an actual bug.

> # ima: cleanup ima_init_policy() a little
> git cherry-pick 5577857 -x

This just cleans up the code.

> # ima: do not measure or appraise the NSFS filesystem  (back  to and
> including 3.19)
> git cherry-pick cd025f7 -x

Not for 3.18.

> # evm: labeling pseudo filesystems exception (back to and including
> 3.17,  3.14)
> git cherry-pick 5101a18 -x

This looks like a new feature, did it fix breakage?

> # KEYS: fix "ca_keys=" partial key matching  (back to and including
> 3.18)
> git cherry-pick f2b3dee -x

This is the one I've grabbed.

> # ima: fix ima_show_template_data_ascii()  (back to and including 3.13)
> git cherry-pick 45b2613 -x

Also grabbed this one (already in tree).

> # ima: add support for new "euid" policy condition
> git cherry-pick 139069e -x

This looks like a new feature.

> # ima: extend "mask" policy matching support
> git cherry-pick 4351c29 -x

Looks like a new feature as well.


> # ima: update builtin policies
> git cherry-pick 24fd03c -x

New feature.


If I misunderstood that please let me know. Otherwise, I can't get anything that
is not strictly a bug fix into the stable tree.


Thanks,
Sasha