Changes in Makefile

a23e1966932464e1c5226cb9ac4ce1d5fc10ba22 - Merge branch 'next' into for-linus

Mon, 15 Jul 2024 21:03:44 +0000

Merge branch 'next' into for-linusPrepare input updates for 6.11 merge window. List of files: /linux/tools/testing/selftests/lsm/Makefile

6f47c7ae8c7afaf9ad291d39f0d3974f191a7946 - Merge tag 'v6.9' into next

Tue, 28 May 2024 04:37:18 +0000

Merge tag 'v6.9' into nextSync up with the mainline to bring in the new cleanup API. List of files: /linux/tools/testing/selftests/lsm/Makefile

60a2f25de7b8b785baee2932db932ae9a5b8c86d - Merge drm/drm-next into drm-intel-gt-next

Thu, 16 May 2024 07:33:01 +0000

Merge drm/drm-next into drm-intel-gt-nextSome display refactoring patches are needed in order to allow conflict-less merging.Signed-off-by: Tvrtko Ursulin List of files: /linux/tools/testing/selftests/lsm/Makefile

06d07429858317ded2db7986113a9e0129cd599b - Merge drm/drm-next into drm-intel-next

Thu, 29 Feb 2024 09:57:56 +0000

Merge drm/drm-next into drm-intel-nextSync to get the drm_printer changes to drm-intel-next.Signed-off-by: Jani Nikula List of files: /linux/tools/testing/selftests/lsm/Makefile

03c11eb3b16dc0058589751dfd91f254be2be613 - Merge tag 'v6.8-rc4' into x86/percpu, to resolve conflicts and refresh the branch

Wed, 14 Feb 2024 09:45:07 +0000

Merge tag 'v6.8-rc4' into x86/percpu, to resolve conflicts and refresh the branchConflicts: arch/x86/include/asm/percpu.h arch/x86/include/asm/text-patching.hSigned-off-by: Ingo Molnar List of files: /linux/tools/testing/selftests/lsm/Makefile

41c177cf354126a22443b5c80cec9fdd313e67e1 - Merge tag 'drm-misc-next-2024-02-08' into msm-next

Sun, 11 Feb 2024 20:34:07 +0000

Merge tag 'drm-misc-next-2024-02-08' into msm-nextMerge the drm-misc tree to uprev MSM CI.Signed-off-by: Rob Clark List of files: /linux/tools/testing/selftests/lsm/Makefile

4db102dcb0396a4ccf89b1eac0f4eb3fd167a080 - Merge drm/drm-next into drm-misc-next

Mon, 29 Jan 2024 13:20:23 +0000

Merge drm/drm-next into drm-misc-nextKickstart 6.9 development cycle.Signed-off-by: Maxime Ripard List of files: /linux/tools/testing/selftests/lsm/Makefile

42ac0be18bfa09c03f52244f7c3e15c89b38532f - Merge branch 'linus' into x86/mm, to refresh the branch and pick up fixes

Fri, 26 Jan 2024 09:26:50 +0000

Merge branch 'linus' into x86/mm, to refresh the branch and pick up fixesSigned-off-by: Ingo Molnar List of files: /linux/tools/testing/selftests/lsm/Makefile

be3382ecdf317f005e7d47356d0a9256cc36dd88 - Merge drm/drm-next into drm-xe-next

Mon, 22 Jan 2024 23:10:10 +0000

Merge drm/drm-next into drm-xe-nextSync to v6.8-rc1.Signed-off-by: Lucas De Marchi List of files: /linux/tools/testing/selftests/lsm/Makefile

cf79f291f985662150363b4a93d16f88f12643bc - Merge v6.8-rc1 into drm-misc-fixes

Mon, 22 Jan 2024 08:44:15 +0000

Merge v6.8-rc1 into drm-misc-fixesLet's kickstart the 6.8 fix cycle.Signed-off-by: Maxime Ripard List of files: /linux/tools/testing/selftests/lsm/Makefile

063a7ce32ddc2c4f2404b0dfd29e60e3dbcdffac - Merge tag 'lsm-pr-20240105' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm

Tue, 09 Jan 2024 20:57:46 +0000

Merge tag 'lsm-pr-20240105' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmPull security module updates from Paul Moore: - Add three new syscalls: lsm_list_modules(), lsm_get_self_attr(), and lsm_set_self_attr(). The first syscall simply lists the LSMs enabled, while the second and third get and set the current process' LSM attributes. Yes, these syscalls may provide similar functionality to what can be found under /proc or /sys, but they were designed to support multiple, simultaneaous (stacked) LSMs from the start as opposed to the current /proc based solutions which were created at a time when only one LSM was allowed to be active at a given time. We have spent considerable time discussing ways to extend the existing /proc interfaces to support multiple, simultaneaous LSMs and even our best ideas have been far too ugly to support as a kernel API; after +20 years in the kernel, I felt the LSM layer had established itself enough to justify a handful of syscalls. Support amongst the individual LSM developers has been nearly unanimous, with a single objection coming from Tetsuo (TOMOYO) as he is worried that the LSM_ID_XXX token concept will make it more difficult for out-of-tree LSMs to survive. Several members of the LSM community have demonstrated the ability for out-of-tree LSMs to continue to exist by picking high/unused LSM_ID values as well as pointing out that many kernel APIs rely on integer identifiers, e.g. syscalls (!), but unfortunately Tetsuo's objections remain. My personal opinion is that while I have no interest in penalizing out-of-tree LSMs, I'm not going to penalize in-tree development to support out-of-tree development, and I view this as a necessary step forward to support the push for expanded LSM stacking and reduce our reliance on /proc and /sys which has occassionally been problematic for some container users. Finally, we have included the linux-api folks on (all?) recent revisions of the patchset and addressed all of their concerns. - Add a new security_file_ioctl_compat() LSM hook to handle the 32-bit ioctls on 64-bit systems problem. This patch includes support for all of the existing LSMs which provide ioctl hooks, although it turns out only SELinux actually cares about the individual ioctls. It is worth noting that while Casey (Smack) and Tetsuo (TOMOYO) did not give explicit ACKs to this patch, they did both indicate they are okay with the changes. - Fix a potential memory leak in the CALIPSO code when IPv6 is disabled at boot. While it's good that we are fixing this, I doubt this is something users are seeing in the wild as you need to both disable IPv6 and then attempt to configure IPv6 labeled networking via NetLabel/CALIPSO; that just doesn't make much sense. Normally this would go through netdev, but Jakub asked me to take this patch and of all the trees I maintain, the LSM tree seemed like the best fit. - Update the LSM MAINTAINERS entry with additional information about our process docs, patchwork, bug reporting, etc. I also noticed that the Lockdown LSM is missing a dedicated MAINTAINERS entry so I've added that to the pull request. I've been working with one of the major Lockdown authors/contributors to see if they are willing to step up and assume a Lockdown maintainer role; hopefully that will happen soon, but in the meantime I'll continue to look after it. - Add a handful of mailmap entries for Serge Hallyn and myself.* tag 'lsm-pr-20240105' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm: (27 commits) lsm: new security_file_ioctl_compat() hook lsm: Add a __counted_by() annotation to lsm_ctx.ctx calipso: fix memory leak in netlbl_calipso_add_pass() selftests: remove the LSM_ID_IMA check in lsm/lsm_list_modules_test MAINTAINERS: add an entry for the lockdown LSM MAINTAINERS: update the LSM entry mailmap: add entries for Serge Hallyn's dead accounts mailmap: update/replace my old email addresses lsm: mark the lsm_id variables are marked as static lsm: convert security_setselfattr() to use memdup_user() lsm: align based on pointer length in lsm_fill_user_ctx() lsm: consolidate buffer size handling into lsm_fill_user_ctx() lsm: correct error codes in security_getselfattr() lsm: cleanup the size counters in security_getselfattr() lsm: don't yet account for IMA in LSM_CONFIG_COUNT calculation lsm: drop LSM_ID_IMA LSM: selftests for Linux Security Module syscalls SELinux: Add selfattr hooks AppArmor: Add selfattr hooks Smack: implement setselfattr and getselfattr hooks ... List of files: /linux/tools/testing/selftests/lsm/Makefile

d3d929a8b0cd6deb7d70d1d8d805bccee3fbf11f - LSM: selftests for Linux Security Module syscalls

Tue, 12 Sep 2023 20:56:56 +0000

LSM: selftests for Linux Security Module syscallsAdd selftests for the three system calls supporting the LSMinfrastructure. This set of tests is limited by the differencesin access policy enforced by the existing security modules.Signed-off-by: Casey Schaufler Reviewed-by: Mickaël Salaün Tested-by: Mickaël Salaün Signed-off-by: Paul Moore List of files: /linux/tools/testing/selftests/lsm/Makefile