From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qk1-f179.google.com (mail-qk1-f179.google.com [209.85.222.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D8E082F7EED for ; Fri, 17 Jul 2026 17:03:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.222.179 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1784307815; cv=none; b=dmD9iMZGuDIcH3v2Nvd/85NQGWv7Q5Vz2lfqR6KQH5SKCUyNTqUhaqQAHq1Gcyv12x19/VHPFJfVtxeCNvSvnPMsKDM8vzDSrR2EdPAoMZLWwMi1ifeDQ9XSC9TWmEkM8ZcXJWMxHL5pOZUiTcHFM0QqFYGa5qj15nvmPwg97V8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1784307815; c=relaxed/simple; bh=4IyVDEjTbHrMhKT+H+6dyluqRj6+971TcLj7HnMvksQ=; h=Date:Message-ID:From:To:Cc:Subject; b=QU4w0uEwdM+6NZ+avl39iG8iirBfObBLfmBLL0OA6YJ1OhK3O/L5W8G50Z4DuoCCmkg++6DsubzFw2eip+CYsfdaOtnJCMJyT702AcTCCqMs5Kn9aCha95Zwy3l6kxcjvCjewAVJNgW8Uv3Vg3vmJls/6AjFa9dQnyEWPxtQPGc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=V/5lBr/O; arc=none smtp.client-ip=209.85.222.179 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="V/5lBr/O" Received: by mail-qk1-f179.google.com with SMTP id af79cd13be357-92e6c4a867cso314997185a.0 for ; Fri, 17 Jul 2026 10:03:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1784307813; x=1784912613; darn=vger.kernel.org; h=subject:cc:to:from:message-id:date:from:to:cc:subject:date :message-id:reply-to:content-type; bh=ZBj8o+qzHfyvCCselvW/9XCn3UKf7PzkVoXV3QNsub0=; b=V/5lBr/O3VRUvSBqwm6ku2OFMchm3+ykXMbba2g2EuYtQFWN0RmG4QvbjCwF1P17Fx XvkR2ejQPcB1StQ5c6n0X1jlg46wtumhjEqKEitT4c7nvnsjo7yUrbw1BhSoYbnC3Bq4 SXKSA8bh+vB6cy4xy+TuQg94CKJ4aerdaXFwOOwhY1lhIBoiJk1Ul2zPq9LTp5RajYm4 vHx4Sl0fQlUk0BRuwpSKj1bUmTmGTBUZLlTiom0JxWBUrYfqdPK2ojVBm8TS8upyDJ8M /UNt/mDVr4SAk91xANyt9CCU5JkcP134GZL1otDmjLVJmTou6x+VlkkC9lic9mTHN2LI Xfyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784307813; x=1784912613; h=subject:cc:to:from:message-id:date:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=ZBj8o+qzHfyvCCselvW/9XCn3UKf7PzkVoXV3QNsub0=; b=oUvfsUOWBSMLr/4pguUYrvwdJSmTaTt/UphZDr9QFUPg3O/haz01JITQd0kxH/rtXK /u/0VsYc7CLAONQZ97tsAtETKn77CFe02Hzt98rCKXxSDG4F4B6B/IAgJSHe0fBURnne J4eX5viQuv6oMQQwe2QXjwtuvBW/DrByfyk9pdoaTbsNzy+GZ64UW360Kccgq1L0EABn lt6k9uYOFuQ2hAoh+9yucXmKezxbeNAWIytE3BVD9KjKUs7qqxLuleHB08+V1Jq0H2Eq mG1YkIKZlFhA1hS9Bkr+dn6joarCLW45E4bXddSrwn9cMuUxCU/NZPYouNag+H+VN5fS UqzQ== X-Forwarded-Encrypted: i=1; AHgh+RqlhRWhDsRrlnfz3fNjKQim0XBrjrLlF2+W6k7BqlagZajXQZLoDMFxqlCLi0JNRvWOXDGxOuE26HMMQxs=@vger.kernel.org X-Gm-Message-State: AOJu0Yz65vw0HYtdp7LUmiHgFu/2sint6wSru/TyRzxNfSMm+PzKCDdW LMm91O38nD1bgdrxmEdKtP7mTCN3yyj/hKynDuGU97BTIkpmoTF+jzRZ6EvZAw1Ncg== X-Gm-Gg: AfdE7cmjxnaEMfvfM5ndyVVxvEra0QwC/GrNOQv5/CwPvojm0PT+7goNOHSKGVJq3R8 OIiUlcf3QVBY10INGcCUzPyb2ynX5+dXG7wj8TjVxg5bm02CJO39xwLwHw3sCDGkizGi5yqbV52 yyJmfc3/5hKv103fr+R99QDO9RJz8d6gXvg6YXj1nwl0fuGmB/eF0KoJ2rSH/dI2pq+HOuu+dZ0 RvNaWnj6+f9sFQ/IiUMAVmhbDwSqbEAO1DOFCX8cn/Xy3yW/RGMLzTXIibmDkRKqNuHsyfocJgY x/Celj+CqM8hMWjn6vKrL+Gx7Zw+ztpsMJjzEN02INtlDmQ8RUW4jngBh4Uy7Td9qhCP46bq4i4 j0baytF+lS05VpWCBzUFC0TtppUN8twwoAcuWH7pAB08r/OVwTWFHiQmIv1RpH63UU65FowqNAo A36kdRvSGNaYgYdu7dlzRx6HX4rQSkrGj1VZQz9GHRm1pUJzE= X-Received: by 2002:a05:620a:2585:b0:92e:de49:64a5 with SMTP id af79cd13be357-930b416d8c7mr389590585a.56.1784307812602; Fri, 17 Jul 2026 10:03:32 -0700 (PDT) Received: from localhost (pool-71-126-255-178.bstnma.fios.verizon.net. [71.126.255.178]) by smtp.gmail.com with ESMTPSA id af79cd13be357-930b52e0f87sm196745985a.7.2026.07.17.10.03.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 17 Jul 2026 10:03:31 -0700 (PDT) Date: Fri, 17 Jul 2026 13:03:30 -0400 Message-ID: From: Paul Moore To: Linus Torvalds Cc: selinux@vger.kernel.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [GIT PULL] selinux/selinux-pr-20260717 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Linus, A single SELinux patch to correct a problem with the overlayfs mmap() and mprotect() fixes from earlier this year where we inadvertenly included an additional SELinux execmem permission check on some operations. Please merge for an upcoming v7.2-rcX release. Paul -- The following changes since commit a13c140cc289c0b7b3770bce5b3ad42ab35074aa: Linux 7.2-rc3 (2026-07-12 14:16:39 -0700) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git tags/selinux-pr-20260717 for you to fetch changes up to 9fe595fad54d4ac6a402edb3f60bec859d52cea6: selinux: fix incorrect execmem checks on overlayfs (2026-07-14 18:10:20 -0400) ---------------------------------------------------------------- selinux/stable-7.2 PR 20260717 ---------------------------------------------------------------- Ondrej Mosnacek (1): selinux: fix incorrect execmem checks on overlayfs security/selinux/hooks.c | 42 ++++++++++++++++++++++----------------- 1 file changed, 24 insertions(+), 18 deletions(-) -- paul-moore.com