linux-kernel - [GIT PULL] Smack patches for 6.19

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <80229bac-c3d9-4c99-9cca-dade23ef7421@schaufler-ca.com>
Date: Sat, 29 Nov 2025 12:24:38 -0800
From: Casey Schaufler <casey@...aufler-ca.com>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: LSM List <linux-security-module@...r.kernel.org>,
 Linux kernel mailing list <linux-kernel@...r.kernel.org>,
 Casey Schaufler <casey@...aufler-ca.com>,
 Konstantin Andreev <andreev@...mel.ru>
Subject: [GIT PULL] Smack patches for 6.19

Hello Linus,

Here is the Smack pull request for v6.19.

It fairly large as Smack pulls go. There are fixes for several
cases where labels are treated inconsistently when imported
from user space. The assignment of extended attributes has
been cleaned up. There are also some documentation improvements.

The following changes since commit e04c78d86a9699d136910cfc0bdcf01087e3267e:

  Linux 6.16-rc2 (2025-06-15 13:49:41 -0700)

are available in the Git repository at:

  https://github.com/cschaufler/smack-next tags/Smack-for-6.19

for you to fetch changes up to 29c701f90b9341f1f9c1854a9c22b71c2318457d:

  Smack: function parameter 'gfp' not described (2025-11-11 12:00:18 -0800)

----------------------------------------------------------------
Patches for 6.19

----------------------------------------------------------------
Casey Schaufler (1):
      Smack: function parameter 'gfp' not described

Konstantin Andreev (8):
      smack: deduplicate "does access rule request transmutation"
      smack: fix bug: SMACK64TRANSMUTE set on non-directory
      smack: deduplicate xattr setting in smack_inode_init_security()
      smack: always "instantiate" inode in smack_inode_init_security()
      smack: fix bug: invalid label of unix socket file
      smack: fix bug: unprivileged task can create labels
      smack: fix bug: setting task label silently ignores input garbage
      smack: fix kernel-doc warnings for smk_import_valid_label()

 Documentation/admin-guide/LSM/Smack.rst |  16 +-
 security/smack/smack.h                  |   3 +
 security/smack/smack_access.c           |  96 ++++++++---
 security/smack/smack_lsm.c              | 279 +++++++++++++++++++++-----------
 4 files changed, 275 insertions(+), 119 deletions(-)