[GIT PULL] integrity: subsystem fixes for v7.3-rc2

[Mimi Zohar <zohar@linux.ibm.com>]

Hi Linus,

This contains three small IMA bug fixes:

- Instantiating the ima_file_truncate and ima_path_truncate LSM
hooks resulted in configfs locking issues. configfs files should
not be measured, appraised, or audited in the first place, so the
builtin policies are updated to exclude them.

- IMA audit messages include the filename, which could result in a
page fault when the filename doesn't exist.

- Un-hide the IMA_MEASURE_PCR_IDX Kconfig prompt.

thanks,

Mimi

The following changes since commit cee9395acd8043be0644b25c34bfa86623f2b935:

  Linux 7.3-rc1 (2026-08-30 13:34:40 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git/
tags/integrity-v7.3-rc2

for you to fetch changes up to 6903878d4654bdef4e08e38cdf1ae306ce7de5f9:

  ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX (2026-09-04
14:01:00 -0400)

----------------------------------------------------------------
integrity-v7.3-rc2

----------------------------------------------------------------
Bradley Morgan (1):
      ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()

Frederick Lawler (2):
      configfs: move CONFIGFS_MAGIC definition to magic.h
      ima: don't measure/appraise files on configfs

Julian Braha (1):
      ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX

 Documentation/ABI/testing/ima_policy  | 3 +++
 fs/configfs/mount.c                   | 4 +---
 include/uapi/linux/magic.h            | 1 +
 security/integrity/ima/Kconfig        | 6 +++++-
 security/integrity/ima/ima_appraise.c | 2 ++
 security/integrity/ima/ima_policy.c   | 7 ++++++-
 6 files changed, 18 insertions(+), 5 deletions(-)