[GIT PULL] SELinux patches for v5.19

[Paul Moore]

Linus,

We've got twelve patches queued for v5.19, with most being fairly
minor.  The highlights are below:

- The checkreqprot and runtime disable knobs have been deprecated for
some time with no active users that we can find.  In an effort to move
things along we are adding a pause when the knobs are used to help
make the deprecation more noticeable in case anyone is still using
these hacks in the shadows.

- We've added the anonymous inode class name to the AVC audit records
when anonymous inodes are involved.  This should make writing policy
easier when anonymous inodes are involved.

- More constification work.  This is fairly straightforward and the
source of most of the diffstat.

- The usual minor cleanups: remove unnecessary assignments, assorted
style/checkpatch fixes, kdoc fixes, macro while-loop encapsulations,
#include tweaks, etc.

Please merge for v5.19.
-Paul

--
The following changes since commit 3123109284176b1532874591f7c81f3837bbdc17:

 Linux 5.18-rc1 (2022-04-03 14:08:21 -0700)

are available in the Git repository at:

 git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
   tags/selinux-pr-20220523

for you to fetch changes up to 1af0e4a0233fea7e8226cb977d379dc20f9bbe11:

 security: declare member holding string literal const
   (2022-05-13 14:51:06 -0400)

----------------------------------------------------------------
selinux/stable-5.19 PR 20220523

----------------------------------------------------------------
Christian Göttsche (8):
     selinux: resolve checkpatch errors
     selinux: update parameter documentation
     selinux: avoid extra semicolon
     selinux: include necessary headers in headers
     selinux: fix indentation level of mls_ops block
     selinux: declare data arrays const
     selinux: log anon inode class name
     security: declare member holding string literal const

Michal Orzel (1):
     selinux: Remove redundant assignments

Paul Moore (3):
     selinux: runtime disable is deprecated, add some ssleep() discomfort
     selinux: checkreqprot is deprecated, add some ssleep() discomfort
     selinux: don't sleep when
              CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is true

include/linux/lsm_audit.h                        |  2 +
include/linux/lsm_hooks.h                        |  4 +-
scripts/selinux/genheaders/genheaders.c          | 75 ++++++++++++--------
scripts/selinux/mdp/mdp.c                        |  4 +-
security/lsm_audit.c                             |  3 +
security/security.c                              |  2 +-
security/selinux/avc.c                           |  6 +-
security/selinux/hooks.c                         |  9 +--
security/selinux/include/audit.h                 |  5 +-
security/selinux/include/avc.h                   |  1 +
security/selinux/include/avc_ss.h                |  4 +-
security/selinux/include/classmap.h              |  2 +-
security/selinux/include/ibpkey.h                |  2 +
security/selinux/include/initial_sid_to_string.h |  3 +-
security/selinux/include/netnode.h               |  2 +
security/selinux/include/netport.h               |  2 +
security/selinux/include/policycap.h             |  2 +-
security/selinux/include/policycap_names.h       |  2 +-
security/selinux/include/security.h              |  4 ++
security/selinux/include/xfrm.h                  |  2 +
security/selinux/nlmsgtab.c                      | 12 ++--
security/selinux/selinuxfs.c                     |  8 ++-
security/selinux/ss/avtab.c                      | 20 +++----
security/selinux/ss/policydb.c                   | 36 +++++-------
security/selinux/ss/services.c                   | 47 ++++++++-------
25 files changed, 144 insertions(+), 115 deletions(-)

-- 
paul-moore.com