From: John Johansen <john.johansen@canonical.com>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: LKLM <linux-kernel@vger.kernel.org>,
"open list:SECURITY SUBSYSTEM"
<linux-security-module@vger.kernel.org>
Subject: [GIT PULL] apparmor bug fixes for 6.5
Date: Thu, 6 Jul 2023 11:28:17 -0700 [thread overview]
Message-ID: <b68ad9e0-2ce1-50d5-4856-e4d8fe97fc82@canonical.com> (raw)
Hi Linus,
Please pull the following set bug fixes to apparmor for 6.5 or 6.5-rc1
+ Bug Fixes
- fix missing error check for rhashtable_insert_fast
- add missing failure check in compute_xmatch_perms
- fix policy_compat permission remap with extended permissions
- fix profile verification and enable it
- fix: kzalloc perms tables for shared dfas
- Fix kernel-doc header for verify_dfa_accept_index
- aa_buffer: Convert 1-element array to flexible array
- Return directly after a failed kzalloc() in two functions
- fix use of strcpy in policy_unpack_test
- fix kernel-doc complaints
- Fix some kernel-doc comments
thanks
- john
The following changes since commit 1b929c02afd37871d5afb9d498426f83432e71c2:
Linux 6.2-rc1 (2022-12-25 13:41:39 -0800)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2023-07-06
for you to fetch changes up to 3f069c4c643225f2b96b4b3f8c30e4445f079d2e:
apparmor: Fix kernel-doc header for verify_dfa_accept_index (2023-07-06 11:12:10 -0700)
----------------------------------------------------------------
+ Bug Fixes
apparmor: fix missing error check for rhashtable_insert_fast
apparmor: add missing failure check in compute_xmatch_perms
apparmor: fix policy_compat permission remap with extended permissions
apparmor: fix profile verification and enable it
apparmor: fix: kzalloc perms tables for shared dfas
apparmor: Fix kernel-doc header for verify_dfa_accept_index
apparmor: aa_buffer: Convert 1-element array to flexible array
apparmor: Return directly after a failed kzalloc() in two functions
apparmor: fix use of strcpy in policy_unpack_test
apparmor: fix kernel-doc complaints
AppArmor: Fix some kernel-doc comments
----------------------------------------------------------------
Danila Chernetsov (1):
apparmor: fix missing error check for rhashtable_insert_fast
John Johansen (5):
apparmor: add missing failure check in compute_xmatch_perms
apparmor: fix policy_compat permission remap with extended permissions
apparmor: fix profile verification and enable it
apparmor: fix: kzalloc perms tables for shared dfas
apparmor: Fix kernel-doc header for verify_dfa_accept_index
Kees Cook (1):
apparmor: aa_buffer: Convert 1-element array to flexible array
Markus Elfring (1):
apparmor: Return directly after a failed kzalloc() in two functions
Rae Moar (1):
apparmor: fix use of strcpy in policy_unpack_test
Randy Dunlap (1):
apparmor: fix kernel-doc complaints
Yang Li (1):
AppArmor: Fix some kernel-doc comments
security/apparmor/crypto.c | 10 ++--
security/apparmor/file.c | 2 +-
security/apparmor/lsm.c | 8 +--
security/apparmor/policy.c | 20 +++++--
security/apparmor/policy_compat.c | 20 +++++--
security/apparmor/policy_unpack.c | 102 +++++++++++++++++++++------------
security/apparmor/policy_unpack_test.c | 13 ++---
security/apparmor/secid.c | 3 +-
8 files changed, 110 insertions(+), 68 deletions(-)
next reply other threads:[~2023-07-06 18:28 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-07-06 18:28 John Johansen [this message]
2023-07-07 17:10 ` pr-tracker-bot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=b68ad9e0-2ce1-50d5-4856-e4d8fe97fc82@canonical.com \
--to=john.johansen@canonical.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®