linux-kernel - [GIT PULL] apparmor bug fixes for 6.5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <b68ad9e0-2ce1-50d5-4856-e4d8fe97fc82@canonical.com>
Date:   Thu, 6 Jul 2023 11:28:17 -0700
From:   John Johansen <john.johansen@...onical.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     LKLM <linux-kernel@...r.kernel.org>,
        "open list:SECURITY SUBSYSTEM" 
        <linux-security-module@...r.kernel.org>
Subject: [GIT PULL] apparmor bug fixes for 6.5

Hi Linus,

Please pull the following set bug fixes to apparmor for 6.5 or 6.5-rc1

+ Bug Fixes
   - fix missing error check for rhashtable_insert_fast
   - add missing failure check in compute_xmatch_perms
   - fix policy_compat permission remap with extended permissions
   - fix profile verification and enable it
   - fix: kzalloc perms tables for shared dfas
   - Fix kernel-doc header for verify_dfa_accept_index
   - aa_buffer: Convert 1-element array to flexible array
   - Return directly after a failed kzalloc() in two functions
   - fix use of strcpy in policy_unpack_test
   - fix kernel-doc complaints
   - Fix some kernel-doc comments

thanks
- john


The following changes since commit 1b929c02afd37871d5afb9d498426f83432e71c2:

   Linux 6.2-rc1 (2022-12-25 13:41:39 -0800)

are available in the Git repository at:

   git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2023-07-06

for you to fetch changes up to 3f069c4c643225f2b96b4b3f8c30e4445f079d2e:

   apparmor: Fix kernel-doc header for verify_dfa_accept_index (2023-07-06 11:12:10 -0700)

----------------------------------------------------------------
+ Bug Fixes
       apparmor: fix missing error check for rhashtable_insert_fast
       apparmor: add missing failure check in compute_xmatch_perms
       apparmor: fix policy_compat permission remap with extended permissions
       apparmor: fix profile verification and enable it
       apparmor: fix: kzalloc perms tables for shared dfas
       apparmor: Fix kernel-doc header for verify_dfa_accept_index
       apparmor: aa_buffer: Convert 1-element array to flexible array
       apparmor: Return directly after a failed kzalloc() in two functions
       apparmor: fix use of strcpy in policy_unpack_test
       apparmor: fix kernel-doc complaints
       AppArmor: Fix some kernel-doc comments

----------------------------------------------------------------
Danila Chernetsov (1):
       apparmor: fix missing error check for rhashtable_insert_fast

John Johansen (5):
       apparmor: add missing failure check in compute_xmatch_perms
       apparmor: fix policy_compat permission remap with extended permissions
       apparmor: fix profile verification and enable it
       apparmor: fix: kzalloc perms tables for shared dfas
       apparmor: Fix kernel-doc header for verify_dfa_accept_index

Kees Cook (1):
       apparmor: aa_buffer: Convert 1-element array to flexible array

Markus Elfring (1):
       apparmor: Return directly after a failed kzalloc() in two functions

Rae Moar (1):
       apparmor: fix use of strcpy in policy_unpack_test

Randy Dunlap (1):
       apparmor: fix kernel-doc complaints

Yang Li (1):
       AppArmor: Fix some kernel-doc comments

  security/apparmor/crypto.c             |  10 ++--
  security/apparmor/file.c               |   2 +-
  security/apparmor/lsm.c                |   8 +--
  security/apparmor/policy.c             |  20 +++++--
  security/apparmor/policy_compat.c      |  20 +++++--
  security/apparmor/policy_unpack.c      | 102 +++++++++++++++++++++------------
  security/apparmor/policy_unpack_test.c |  13 ++---
  security/apparmor/secid.c              |   3 +-
  8 files changed, 110 insertions(+), 68 deletions(-)