lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 11 Mar 2024 13:47:16 -0700
From: Casey Schaufler <casey@...aufler-ca.com>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: LSM List <linux-security-module@...r.kernel.org>,
 Linux kernel mailing list <linux-kernel@...r.kernel.org>,
 Casey Schaufler <casey@...aufler-ca.com>,
 roberto Sassu <roberto.sassu@...weicloud.com>
Subject: [GIT PULL] Smack patches for 6.9

Hello Linus,

Here is the Smack pull request for v6.9.

There are 6 patches. One is a simple refactoring to remove
code duplication. The other five, from Roberto Sassu, correct
the in-memory inode initialization path used by ramfs in Smack.
This is necessary for ramfs to correctly handle directory label
transmutation.

All has been in the next branch and pass all tests.

The following changes since commit 6613476e225e090cc9aad49be7fa504e290dd33d:

  Linux 6.8-rc1 (2024-01-21 14:11:32 -0800)

are available in the Git repository at:

  https://github.com/cschaufler/smack-next tags/Smack-for-6.9

for you to fetch changes up to 69b6d71052b54fb10feba68564ccb41c0f0ce1e9:

  Smack: use init_task_smack() in smack_cred_transfer() (2024-02-14 10:47:06 -0800)

----------------------------------------------------------------
Smack updates for v6.9.

Improvements to the initialization of in-memory inodes.
A fix in ramfs to propery ensure the initialization of
in-memory inodes.
Removal of duplicated code in smack_cred_transfer().

----------------------------------------------------------------
Casey Schaufler (1):
      Smack: use init_task_smack() in smack_cred_transfer()

Roberto Sassu (5):
      smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
      smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
      smack: Always determine inode labels in smack_inode_init_security()
      smack: Initialize the in-memory inode in smack_inode_init_security()
      ramfs: Initialize security of in-memory inodes

 fs/ramfs/inode.c           |  32 +++++++++++++-
 security/smack/smack_lsm.c | 102 +++++++++++++++++++++++++--------------------
 2 files changed, 87 insertions(+), 47 deletions(-)


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ