From: Paul Moore <paul@paul-moore.com>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org,
linux-kernel@vger.kernel.org
Subject: [GIT PULL] selinux/selinux-pr-20241217
Date: Tue, 17 Dec 2024 23:52:02 -0500 [thread overview]
Message-ID: <ac07005d555b51b0ae021bc2b0222f39@paul-moore.com> (raw)
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 1050 bytes --]
Linus,
One small SELinux patch to get rid improve our handling of unknown
extended permissions by safely ignoring them. Not only does this
make it easier to support newer SELinux policy on older kernels in
the future, it removes to BUG() calls from the SELinux code.
-Paul
--
The following changes since commit 40384c840ea1944d7c5a392e8975ed088ecf0b37:
Linux 6.13-rc1 (2024-12-01 14:28:56 -0800)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
tags/selinux-pr-20241217
for you to fetch changes up to 900f83cf376bdaf798b6f5dcb2eae0c822e908b6:
selinux: ignore unknown extended permissions (2024-12-15 21:59:03 -0500)
----------------------------------------------------------------
selinux/stable-6.13 PR 20241217
----------------------------------------------------------------
Thiébaud Weksteen (1):
selinux: ignore unknown extended permissions
security/selinux/ss/services.c | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
--
paul-moore.com
next reply other threads:[~2024-12-18 4:52 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-12-18 4:52 Paul Moore [this message]
2024-12-18 22:20 ` pr-tracker-bot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ac07005d555b51b0ae021bc2b0222f39@paul-moore.com \
--to=paul@paul-moore.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=selinux@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®