From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751915AbeFESVa (ORCPT ); Tue, 5 Jun 2018 14:21:30 -0400 Received: from namei.org ([65.99.196.166]:58330 "EHLO namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751786AbeFESV2 (ORCPT ); Tue, 5 Jun 2018 14:21:28 -0400 Date: Wed, 6 Jun 2018 04:21:25 +1000 (AEST) From: James Morris To: Linus Torvalds cc: linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: [GIT PULL] Security subsystem: general updates for v4.18 Message-ID: User-Agent: Alpine 2.21 (LRH 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Please pull these general security subsystem updates for v4.18. Summary: - Incorporate new socketpair() hook into LSM and wire up the SELinux and Smack modules. From David Herrmann: "The idea is to allow SO_PEERSEC to be called on AF_UNIX sockets created via socketpair(2), and return the same information as if you emulated socketpair(2) via a temporary listener socket. Right now SO_PEERSEC will return the unlabeled credentials for a socketpair, rather than the actual credentials of the creating process." - Sargun Dhillon removed the unused security_settime LSM hook. - Tycho Andersen removed some stack allocated arrays from the keys code. --- The following changes since commit 6da6c0db5316275015e8cc2959f12a17584aeb64: Linux v4.17-rc3 (2018-04-29 14:17:42 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next-general for you to fetch changes up to 890e2abe1028c39e5399101a2c277219cd637aaa: dh key: get rid of stack allocated array for zeroes (2018-05-11 13:07:49 -0700) ---------------------------------------------------------------- David Herrmann (3): security: add hook for socketpair() net: hook socketpair() into LSM selinux: provide socketpair callback James Morris (2): Merge tag 'v4.17-rc2' into next-general Merge tag 'v4.17-rc3' into next-general Sargun Dhillon (1): security: remove security_settime Tom Gundersen (1): smack: provide socketpair callback Tycho Andersen (3): big key: get rid of stack array allocation dh key: get rid of stack allocated array dh key: get rid of stack allocated array for zeroes include/linux/lsm_hooks.h | 7 +++++++ include/linux/security.h | 21 +++++++-------------- net/socket.c | 7 +++++++ security/keys/big_key.c | 11 ++++++++++- security/keys/dh.c | 35 +++++++++++++---------------------- security/security.c | 6 ++++++ security/selinux/hooks.c | 13 +++++++++++++ security/smack/smack_lsm.c | 22 ++++++++++++++++++++++ 8 files changed, 85 insertions(+), 37 deletions(-)