[GIT] More security updates for 2.6.29

From: James Morris
Date: Tue Jan 06 2009 - 18:39:45 EST


Please pull the following updates for the security subsystem. Noteworthy
is the fix for a regression introducted by the creds API (found by hch),
and updates from Paul Moore's labeled networking tree.

The following changes since commit 238c6d54830c624f34ac9cf123ac04aebfca5013:
Linus Torvalds (1):
Merge git://git.kernel.org/.../agk/linux-2.6-dm

are available in the git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6 for-linus

Casey Schaufler (1):
smack: Add support for unlabeled network hosts and networks

David Howells (2):
CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]
CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3]

Eric Paris (1):
SELinux: shrink sizeof av_inhert selinux_class_perm and context

James Morris (4):
keys: fix sparse warning by adding __user annotation to cast
Merge branch 'master' of git://git.infradead.org/users/pcmoore/lblnet-2.6_next into next
Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]"
Merge branch 'next' into for-linus

Paul Moore (2):
netlabel: Update kernel configuration API
selinux: Deprecate and schedule the removal of the the compat_net functionality

Documentation/feature-removal-schedule.txt | 12 +
include/linux/capability.h | 17 ++-
include/linux/security.h | 41 +++-
include/net/cipso_ipv4.h | 6 +-
include/net/netlabel.h | 86 ++++++-
kernel/capability.c | 2 +-
net/ipv4/cipso_ipv4.c | 88 +++++--
net/netlabel/netlabel_cipso_v4.c | 61 ++----
net/netlabel/netlabel_domainhash.c | 67 +++++
net/netlabel/netlabel_domainhash.h | 4 +
net/netlabel/netlabel_kapi.c | 347 +++++++++++++++++++++-----
net/netlabel/netlabel_unlabeled.c | 26 +-
net/netlabel/netlabel_unlabeled.h | 15 ++
security/commoncap.c | 29 +--
security/keys/keyctl.c | 2 +-
security/security.c | 26 ++-
security/selinux/Kconfig | 27 --
security/selinux/avc.c | 16 +-
security/selinux/hooks.c | 22 +-
security/selinux/include/avc_ss.h | 4 +-
security/selinux/selinuxfs.c | 16 +-
security/selinux/ss/context.h | 2 +-
security/smack/smack.h | 31 +++-
security/smack/smack_access.c | 28 ++-
security/smack/smack_lsm.c | 310 +++++++++++++++++++----
security/smack/smackfs.c | 369 ++++++++++++++++++----------
26 files changed, 1230 insertions(+), 424 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/