From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qk1-f178.google.com (mail-qk1-f178.google.com [209.85.222.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AF38C36AB6B for ; Sat, 17 Oct 2026 03:00:07 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.222.178 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1792206014; cv=none; b=maJywgXPHHsqRF2C0WuSzqsRVKnPdpzOMmJUnxuQb70xwTShzOnawu8l1utqDKD5gJhx5yFn86I+UMyJrcJldZwphYR+6phUDJMwEKnVIjxPUd03tsqDBeRgeaoRpSrXnHfEGe/L7/W4LJDD7eN1uZtbOAHmmZnh5MpUEcztzC8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1792206014; c=relaxed/simple; bh=RnyUtaj56FacvXKJT/5BOE5uL4aLHIIMeKqQgZyyy3w=; h=Date:Message-ID:From:To:Cc:Subject; b=lnWccWJnPNyun88RNZpqj3mJrPFi9dWoz/emDKvPUZU23Ytx1c5aigSSPmQFkdH2PpeyO1YcIQ6ZyX6LxUIpkP+eydv8Bu1O6afS4UY6WyLy2MO/0dqu5nEW7JJJ+k4C5BOFHlG8QMCcIsA6GSSnuNKvpvbwpuW3xB3O/KkTmgU= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=SkyKkWWj; arc=none smtp.client-ip=209.85.222.178 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="SkyKkWWj" Received: by mail-qk1-f178.google.com with SMTP id af79cd13be357-93f20c3aaa5so47304785a.2 for ; Fri, 16 Oct 2026 20:00:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1792206006; x=1792810806; darn=vger.kernel.org; h=subject:cc:to:from:message-id:date:from:to:cc:subject:date :message-id:reply-to:content-type; bh=H7TFgfiFf6FEXV3J7Inq1lkdC8JNBzhySk1rzqW+t48=; b=SkyKkWWj35bDcts8jT/Vm8ebaAmtwQIQ2aldBjUveWiFsnhPtE2VD0UHBM2h+63BMI wHOSrBjN5DZr4EyOYc8VMQCHCVh6mueA0IX4/i0giSK7bBzkRGGMQautk4BBAOOt21Ig vLVnT5fVS/TGo9mBBCDKKU1YvI+9gtXlIu6P0/e9MklAsUxTO2VxMtF9f9hV73u9pKwy GQaIZa7rkJRP6gHb7/nORUOF/hLYirjJcN81gf/LRtgiCva7zkj8K4RYXuSCv/EinZsi kS9sy+YCmmbIM68+/qDwnjh4g8AFfUwZnkv0fujgMWfSt856edmHxDNlOiGuDoWOoNjy +LuQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792206006; x=1792810806; h=subject:cc:to:from:message-id:date:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=H7TFgfiFf6FEXV3J7Inq1lkdC8JNBzhySk1rzqW+t48=; b=dKKsYa9GVjzMvXYAQ/Y9Z04Se/vh4lUwJ3pATKAM/+JukbZeFVZipFGfLBZDq0jOwk NHtU/2S8TjC932CT4HHM1bXvQI+il33eVMWhOI0X1xbpklZsXoi4DhDdz8CDuYol5QXz HANDTZVHdNQDb5hK8DRvAv2UuvMn59iNXvDDOoJoEMF435B9uPBcLrXhlfNXYzKu6qnX JQiqhSPIc7GsgBTSDWynQEIoICicWMgsDjcL2s9K9AWCTBu4MD4vfiH1PlvxQdi4nl19 QOGByoOc8wyDWUKpdb7BI/2z5trdUNC/bzV4VZr8FgzDv6pQkT3kjn33i/Gt+DkMJAFH wR/g== X-Forwarded-Encrypted: i=1; AKwUvBwXoLaYf0g1MCA3DsovEq9SiXfJWyWnqCpWtTeavufTQvzJLj3Nk/yP+w7B5Yj4RbHPCi87clBwlFS8n2g=@vger.kernel.org X-Gm-Message-State: AFq9FYJRW/WNBrxEFuQGzqGU/Sn1QBygYruIwwBaYEAVNQS/MfzpZpu5 ZjhHCXdFGy7oKIpF0Z1lVI6I24vLzXTtfl75A1qQnvOcClNuTSdbYsO9kFJOZbOtNQ== X-Gm-Gg: AYBFou1L6GtK6KPRNUqmDr9vPbyg4KfDU2gK2f69qYi1dtJ/BIjBPW2DYazljGBVRz1 XSaAHyT/LgNxR5GVmJts0DoI4Vb8RqBzrQvlFb6Ef3lNgOXkB3VQ4xzlAB0FNlvjv/3mDXD3pvA 8hXRlZroXlKBjo/CNY1KEGCatK+zoUwUrx97U5b7n+zCswvbhjzSwzfZE2i3RiFf2mjzaitVv5W tr8anQOS+5SEWzd+mOibH2ZQO4AAjN05nNiAtQdQPy/DJG3lLvGZQXfmgmRO37lshVt9XmaQmGH bIfZH8AwKFZheP4jYq9hPmGoImvYApgVkbYpuJFHWz9mEb0rq7cjdxgggjStix3E0k3dCi+UgkF 6NNwreJBdNLhOu7xooXpcOQa8Bu7+0/66OtxM8ImzC1qviOgq44Ms0QWEzggz5S2la0SwgVGbOB SEGLjzHJ9qi9ZddoS22UZ2shY2wm5OBThWo1/etc2JjhSbcuneQSKryggaBpDhMD4Ms1Nmew0jZ tmLGkxx991ykedLfxL0/KrKr5i6azo1txxkmlvhxV0jXXGGqoe7+kFUDgxD2OojY3eCjS27Cp4= X-Received: by 2002:a05:620a:439b:b0:939:9edf:edb7 with SMTP id af79cd13be357-93f29b73708mr304873385a.6.1792206006258; Fri, 16 Oct 2026 20:00:06 -0700 (PDT) Received: from localhost (pool-71-126-255-178.bstnma.fios.verizon.net. [71.126.255.178]) by smtp.gmail.com with ESMTPSA id af79cd13be357-93f1a1850cbsm361980985a.24.2026.10.16.20.00.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 16 Oct 2026 20:00:05 -0700 (PDT) Date: Fri, 16 Oct 2026 23:00:05 -0400 Message-ID: From: Paul Moore To: Linus Torvalds Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [GIT PULL] selinux/selinux-pr-20261015 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Linus, Thirteen SELinux patches for the Linux v7.4 merge window: - Continue to improve the load time validation of SELinux policies While SELinux policy loading remains a privileged operation, we continue the recent trend of hardening the policy parsing and validation code in the kernel to ensure that invalid, or poorly formatted policies are rejected at load time. - Correctly incorporate "neveraudit" into the xperms code This change aligns the xperms neveraudit handling with the conventional permission handling code, exiting early from the SELinux auditing code when neveraudit is enabled for the domain. - Mark the selinuxfs "status" and "policy" files immutable These are read-only kernel/userspace interfaces that could successfully be opened at the VFS layer through the use of CAP_DAC_OVERRIDE. With this pull request we are marking these two files as immutable so that the requests to open these file with write permissions now fail at the VFS layer. This also allows us to drop some of our mmap() checks around write permissions as the VFS will now also handle this for us. The existing SELinux permissions checks remain untouched. - Convert the selinuxfs inode numbers to u64 Bring selinuxfs current with other filesystems in using u64 for inode numbering as opposed to the architecture dependent unsigned long. - Constify a number of the SELinux AVC function parameters - Remove a SELinux MLS function that was no longer used Paul -- The following changes since commit cee9395acd8043be0644b25c34bfa86623f2b935: Linux 7.3-rc1 (2026-08-30 13:34:40 -0700) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20261015 for you to fetch changes up to b73b967b0fc44707f39faa4f298f1f9d9b7bfac5: selinux: validate permissive and neveraudit map types at load (2026-09-30 16:59:44 -0400) ---------------------------------------------------------------- selinux/stable-7.4 PR 20261015 ---------------------------------------------------------------- Christian Göttsche (8): selinux: constify avc function parameters selinux: reject a policy that both rejects and allows unknown classes selinux: reject duplicate symbol values during policy load selinux: bounds-check filename transition source types at load selinux: check neveraudit in avc_xperms_audit_required() selinux: bounds-check role and user membership bitmaps at load selinux: validate user MLS range and default level at load selinux: validate permissive and neveraudit map types at load Paul Moore (2): selinux: convert selinuxfs inode numbers from unsigned long to u64 selinux: avoid 64-bit division of inode numbers Stephen Smalley (3): selinux: tighten policydb_context_isvalid() checks selinux: remove unused mls_setup_user_range() selinux: mark status and policy inodes as immutable, drop status mmap write checks security/selinux/avc.c | 37 ++++---- security/selinux/include/avc.h | 7 - security/selinux/selinuxfs.c | 59 +++++++------ security/selinux/ss/mls.c | 38 -------- security/selinux/ss/mls.h | 3 security/selinux/ss/mls_types.h | 3 security/selinux/ss/policydb.c | 137 ++++++++++++++++++++++++++++---- 7 files changed, 183 insertions(+), 101 deletions(-) -- paul-moore.com