From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752732AbbIAEaj (ORCPT ); Tue, 1 Sep 2015 00:30:39 -0400 Received: from ozlabs.org ([103.22.144.67]:59646 "EHLO ozlabs.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750949AbbIAEah (ORCPT ); Tue, 1 Sep 2015 00:30:37 -0400 Date: Tue, 1 Sep 2015 14:30:35 +1000 From: Stephen Rothwell To: Linus Torvalds Cc: James Morris , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: Re: [GIT PULL] Security subsystem changes for 4.3 Message-ID: <20150901143035.6a67900d@canb.auug.org.au> In-Reply-To: References: X-Mailer: Claws Mail 3.12.0 (GTK+ 2.24.28; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Linus, On Tue, 1 Sep 2015 10:00:09 +1000 (AEST) James Morris wrote: > > Highlights: > > o PKCS#7 support added to support signed kexec, also utilized for module > signing. See comments in 3f1e1bea. > > ** NOTE: this requires linking against the OpenSSL library, which must > be installed, e.g. the openssl-devel on Fedora ** > > o Smack: add IPv6 host labeling; ignore labels on kernel threads; > support smack labeling mounts which use binary mount data > > o SELinux: add ioctl whitelisting (see > http://kernsec.org/files/lss2015/vanderstoep.pdf); fix mprotect > PROT_EXEC regression caused by mm change > > o Seccomp: add ptrace options for suspend/resume > > > Please pull. > > --- > > The following changes since commit e5aeced6bcec5a110e6dfcb78acc203dbe895b59: > > Merge tag 'spi-v4.3' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi (2015-08-31 15:55:49 -0700) > > are available in the git repository at: > > git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next This has one commit that has not been in linux-next. Not judging anything about it, just noting. > David Howells (28): > PKCS#7: Add OIDs for sha224, sha284 and sha512 hash algos and use them -- Cheers, Stephen Rothwell sfr@canb.auug.org.au