[GIT PULL] selinux/selinux-pr-20260919

[Paul Moore <paul@paul-moore.com>]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 1466 bytes --]

Linus,

Three fixes for Linux v7.3-rcX:

- Ensure that the cached SELinux access decisions are correct.

- Fix the SELinux overlayfs code to properly track the top-level/user
information on multiple stacked overlayfs filesystems.

- Fix the SELinux overlayfs code to properly enforce mprotect() access
control policy on all of the different layers in multiple stacked
overlayfs filesystems.

Paul

--
The following changes since commit df2908090cda368b01ff43709f51890076c56157:

  Linux 7.3-rc2 (2026-09-06 15:07:20 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
    tags/selinux-pr-20260919

for you to fetch changes up to 78fc54b934bfb2c18aad8154c7302067146946f9:

  selinux: recheck intermediate backing files on mprotect()
    (2026-09-15 23:30:07 -0400)

----------------------------------------------------------------
selinux/stable-7.3 PR 20260919
----------------------------------------------------------------

Christian Göttsche (1):
      selinux: always fill AVC decision in avc_has_perm_noaudit()

Karl Mehltretter (2):
      selinux: preserve user SID across nested backing files
      selinux: recheck intermediate backing files on mprotect()

 security/selinux/avc.c            |    5 
 security/selinux/hooks.c          |  158 ++++++++++++++++++++++++++----
 security/selinux/include/objsec.h |   10 +
 3 files changed, 150 insertions(+), 23 deletions(-)

--
paul-moore.com