linux-kernel - [GIT PULL] Smack patches for 6.9

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <5f321246-e0ba-4882-a42d-fe174d593aaf@schaufler-ca.com>
Date: Mon, 11 Mar 2024 13:47:16 -0700
From: Casey Schaufler <casey@...aufler-ca.com>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: LSM List <linux-security-module@...r.kernel.org>,
 Linux kernel mailing list <linux-kernel@...r.kernel.org>,
 Casey Schaufler <casey@...aufler-ca.com>,
 roberto Sassu <roberto.sassu@...weicloud.com>
Subject: [GIT PULL] Smack patches for 6.9

Hello Linus,

Here is the Smack pull request for v6.9.

There are 6 patches. One is a simple refactoring to remove
code duplication. The other five, from Roberto Sassu, correct
the in-memory inode initialization path used by ramfs in Smack.
This is necessary for ramfs to correctly handle directory label
transmutation.

All has been in the next branch and pass all tests.

The following changes since commit 6613476e225e090cc9aad49be7fa504e290dd33d:

  Linux 6.8-rc1 (2024-01-21 14:11:32 -0800)

are available in the Git repository at:

  https://github.com/cschaufler/smack-next tags/Smack-for-6.9

for you to fetch changes up to 69b6d71052b54fb10feba68564ccb41c0f0ce1e9:

  Smack: use init_task_smack() in smack_cred_transfer() (2024-02-14 10:47:06 -0800)

----------------------------------------------------------------
Smack updates for v6.9.

Improvements to the initialization of in-memory inodes.
A fix in ramfs to propery ensure the initialization of
in-memory inodes.
Removal of duplicated code in smack_cred_transfer().

----------------------------------------------------------------
Casey Schaufler (1):
      Smack: use init_task_smack() in smack_cred_transfer()

Roberto Sassu (5):
      smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
      smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
      smack: Always determine inode labels in smack_inode_init_security()
      smack: Initialize the in-memory inode in smack_inode_init_security()
      ramfs: Initialize security of in-memory inodes

 fs/ramfs/inode.c           |  32 +++++++++++++-
 security/smack/smack_lsm.c | 102 +++++++++++++++++++++++++--------------------
 2 files changed, 87 insertions(+), 47 deletions(-)