linux-kernel - [GIT PULL] AppArmor updates for 6.11-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <d6585289-6146-4a10-bbdc-7bdfa5b16ffb@canonical.com>
Date: Thu, 25 Jul 2024 11:06:28 -0700
From: John Johansen <john.johansen@...onical.com>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: LKLM <linux-kernel@...r.kernel.org>,
 "open list:SECURITY SUBSYSTEM" <linux-security-module@...r.kernel.org>
Subject: [GIT PULL] AppArmor updates for 6.11-rc1

Hi Linus,

I know this is running extremely late so I have only included bug fixes
and a few small cleanups.

In particular the cleanup
   optimization: try to avoid refing the label in apparmor_file_open
is nice to have for scaling on large systems, as it avoids take a ref count when
it isn't necessary. For the file open test resulting in

   kernel test robot noticed a 93.1% improvement of will-it-scale.per_process_ops on:


These patches have all been merge tested against your tree as of
this morning and regression tested against your tree as of yesterday.

thanks
- john




The following changes since commit 4cece764965020c22cff7665b18a012006359095:

   Linux 6.9-rc1 (2024-03-24 14:10:05 -0700)

are available in the Git repository at:

   git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2024-07-25

for you to fetch changes up to e0ff0cff1f6cdce0aa596aac04129893201c4162:

   apparmor: unpack transition table if dfa is not present (2024-07-24 11:15:06 -0700)

----------------------------------------------------------------
apparmor-pr-2024-07-24 PR 2024-07-25

+ Cleanups
       - optimization: try to avoid refing the label in apparmor_file_open
       - remove useless static inline function is_deleted
       - use kvfree_sensitive to free data->data
       - fix typo in kernel doc

+ Bug fixes
       - unpack transition table if dfa is not present
       - test: add MODULE_DESCRIPTION()
       - take nosymfollow flag into account
       - fix possible NULL pointer dereference
       - fix null pointer deref when receiving skb during sock creation

----------------------------------------------------------------
Alexander Mikhalitsyn (1):
       apparmor: take nosymfollow flag into account

Christian Göttsche (1):
       apparmor: fix typo in kernel doc

Colin Ian King (1):
       apparmor: remove useless static inline function is_deleted

Fedor Pchelkin (1):
       apparmor: use kvfree_sensitive to free data->data

Georgia Garcia (1):
       apparmor: unpack transition table if dfa is not present

Jeff Johnson (1):
       apparmor: test: add MODULE_DESCRIPTION()

Leesoo Ahn (1):
       apparmor: fix possible NULL pointer dereference

Mateusz Guzik (1):
       apparmor: try to avoid refing the label in apparmor_file_open

Xiao Liang (1):
       apparmor: Fix null pointer deref when receiving skb during sock creation

  security/apparmor/apparmorfs.c         |  4 ++++
  security/apparmor/file.c               | 13 ----------
  security/apparmor/include/cred.h       | 20 ++++++++++++++++
  security/apparmor/lsm.c                | 14 ++++++++---
  security/apparmor/mount.c              |  2 ++
  security/apparmor/policy.c             |  2 +-
  security/apparmor/policy_unpack.c      | 43 ++++++++++++++++++++--------------
  security/apparmor/policy_unpack_test.c |  1 +
  8 files changed, 65 insertions(+), 34 deletions(-)