From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qk1-f179.google.com (mail-qk1-f179.google.com [209.85.222.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 853B235974 for ; Wed, 18 Dec 2024 04:52:04 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.222.179 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1734497526; cv=none; b=Kg/eFqGylCy/NyZPGeYIxVkQPs0qwpEz9FfmiMijNaO8ykuf5jfg7gBVSVqbewgpzdGD+NtjGjNjTUEbO0PAjzw9YUTobGJeMNGzdLL9ZWEd1O+LrpHJvNNG2cHCc9FJXdi2cz7EPNsx87qsQp+nsnTfRvwk0AxxaqEBoR9aR1g= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1734497526; c=relaxed/simple; bh=kok0zc3eMer5C1HhBdN/GHJdm0tzzDUEl4j2ZX8sZBI=; h=Date:Message-ID:From:To:Cc:Subject; b=sThsyFM8TZs/7swMdz+OT4VnqyMsfJ8dLDArhiwYcRQjLg7xc71zmQn+SZY4XI3IFd+P5AuQPUcnXrKlWCnLpt6EcMW2llaQkaPm1O88fuCgH4TsYoSMaZrwDs/EXWV9CE4sB7Lt23FANJAEcg5whIwQQXy5FloNrZY1XhIXdAg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=PYXWkFGV; arc=none smtp.client-ip=209.85.222.179 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="PYXWkFGV" Received: by mail-qk1-f179.google.com with SMTP id af79cd13be357-7b15467f383so555143885a.3 for ; Tue, 17 Dec 2024 20:52:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1734497523; x=1735102323; darn=vger.kernel.org; h=subject:cc:to:from:message-id:date:from:to:cc:subject:date :message-id:reply-to; bh=4u188fwwLz5ur+zRkfbW24ZR21SR4bFjDTgnLQvheOM=; b=PYXWkFGV9CVQ41RrZ8NRrKdl+L7bMjI+o4GSC+GKyCnJYmETwUN3mTbKnudiq9O63H qVRDvdZD2ZDVxJ6uI72+tnepZCiylO1gDgPljqTEF4ZvESur+HP4S9IRXvPNA0/DLCbg cxgp+gn53A2ZtyGQGqjmlMPUtsNoPwg5nHh2JZLl/fm37hK+yV4D36SWjVWZ2TdoE6+m 12EQuMk9ZoH6MmiPHOx717tAGBRX3uf0Zk5clG3Gki8G3uv6rkIaD0Ahr6tgMEfESFNY jJconiiKDbTHlePXiWi0mVgYT/kn/wBRUqdsJAtm0Ww6fyHrqC/IMTGXS/AiILcKQHfe eFaw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1734497523; x=1735102323; h=subject:cc:to:from:message-id:date:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=4u188fwwLz5ur+zRkfbW24ZR21SR4bFjDTgnLQvheOM=; b=FN+0bqg4vToKaw/V9DlYs9Ji+BSi5CV9WWQzL0c+pjrbFCIWfnttE+Xi/kOKGQ2/DR Ot86VszBVcoCLOxK5DmZEFAsr/vL2qwxSGFsmS5+S40m/Vt+l6gUqU7F7cyCZftpFH+n QhQnoMFh2EF+F1gOcx0Syr/RgNiRfhSeGkz7nl4131WD016Iwn5OLRH3GTifEDnu48+d SHtWnN6qmOHuSWhyP3sBM+DdSy/r4/9vC99sx+QrFfssXD0cUYysWW7dG/An2w7bf9O5 wu5bZJljyQzjuSl9abParjcC36sQc+obydnz2H1eYC0+yUJWaFWLCDxIfcp0krg8DrOj o1FA== X-Forwarded-Encrypted: i=1; AJvYcCVQ8tTjRhy5pqYBujup+3VIM44omT+HYKeZkSToCAfVK+1UdyfAfm+F4DGK2R5a+mqch6P5Cj3foCekslQ=@vger.kernel.org X-Gm-Message-State: AOJu0YwTDsnAqXBw/y2GoSU/HgB0lqPy6+89arl4E2E9vGjnXCb4s9Sq B+cBU+eCXXh3etye4EaF/PgRy3IBrI+HHhKQoIZi3N01uOerTqzsTYlO+yF3pYPZRY999+116mY = X-Gm-Gg: ASbGnctf8DRHQtzySZHPybXE/SXM+KvwPvadybC1MEKBKR+X8eyEe4xWyRYhkmxVCD8 mK3w04m+ngW+sy96dapkCKX6Mo0VxW7vE9ZjfxvSn0upZpBuUw5Bw4MDwKGybwT+iSWcjroQl0h RAG1tk+h8Sbxi1h8Umlg/nl5R20xQotMYxu7ijwxlJ3PR10FJ75Of4n/odnoDyTmwKPwtmQf7mh MvgUQish5T8nHgbrUobVu0EaI5utZJHyu9NcZEf91PqBXKZxvc= X-Google-Smtp-Source: AGHT+IGpgRNZyn48P8+vL4Zxk5E5VsvTJHu1mGknTyiPBCmAlwrep5Urrrc9tA/AEzoXYDlUfki+4w== X-Received: by 2002:ad4:5fcf:0:b0:6d4:211c:dff0 with SMTP id 6a1803df08f44-6dd091ddcb6mr21927306d6.29.1734497523486; Tue, 17 Dec 2024 20:52:03 -0800 (PST) Received: from localhost ([70.22.175.108]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6dccd390fdasm46037696d6.124.2024.12.17.20.52.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 17 Dec 2024 20:52:03 -0800 (PST) Date: Tue, 17 Dec 2024 23:52:02 -0500 Message-ID: From: Paul Moore To: Linus Torvalds Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [GIT PULL] selinux/selinux-pr-20241217 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Linus, One small SELinux patch to get rid improve our handling of unknown extended permissions by safely ignoring them. Not only does this make it easier to support newer SELinux policy on older kernels in the future, it removes to BUG() calls from the SELinux code. -Paul -- The following changes since commit 40384c840ea1944d7c5a392e8975ed088ecf0b37: Linux 6.13-rc1 (2024-12-01 14:28:56 -0800) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20241217 for you to fetch changes up to 900f83cf376bdaf798b6f5dcb2eae0c822e908b6: selinux: ignore unknown extended permissions (2024-12-15 21:59:03 -0500) ---------------------------------------------------------------- selinux/stable-6.13 PR 20241217 ---------------------------------------------------------------- Thiébaud Weksteen (1): selinux: ignore unknown extended permissions security/selinux/ss/services.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) -- paul-moore.com