Security testing tree patch review for 2.6.26

From: James Morris
Date: Thu Apr 17 2008 - 07:08:00 EST



Please review the following security patches for 2.6.26, which have
been undergoing testing in the "next" tree and affect multiple LSMs.


The following changes since commit 4b119e21d0c66c22e8ca03df05d9de623d0eb50f:
Linus Torvalds (1):
Linux 2.6.25

are available in the git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6.git for-linus

Ahmed S. Darwish (10):
LSM: Introduce inode_getsecid and ipc_getsecid hooks
SELinux: setup new inode/ipc getsecid hooks
Audit: use new LSM hooks instead of SELinux exports
Netlink: Use generic LSM hook
SELinux: remove redundant exports
LSM/Audit: Introduce generic Audit LSM hooks
Audit: internally use the new LSM audit hooks
SELinux: use new audit hooks, remove redundant exports
Audit: Final renamings and cleanup
Security: Introduce security= boot parameter

James Morris (2):
Tell git about security/selinux/include/audit.h
security: fix up documentation for security_module_enable

Documentation/kernel-parameters.txt | 6 ++
include/linux/audit.h | 29 ++++++++
include/linux/security.h | 114 +++++++++++++++++++++++++++++-
include/linux/selinux.h | 134 -----------------------------------
kernel/audit.c | 24 +++----
kernel/audit.h | 25 -------
kernel/auditfilter.c | 99 ++++++++++----------------
kernel/auditsc.c | 74 ++++++++++---------
net/netlink/af_netlink.c | 3 +-
security/dummy.c | 51 +++++++++++++-
security/security.c | 73 +++++++++++++++++++-
security/selinux/exports.c | 42 -----------
security/selinux/hooks.c | 34 ++++++++-
security/selinux/include/audit.h | 65 +++++++++++++++++
security/selinux/ss/services.c | 45 +++++++++---
security/smack/smack.h | 2 +
security/smack/smack_lsm.c | 7 ++-
security/smack/smackfs.c | 11 +++-
18 files changed, 503 insertions(+), 335 deletions(-)
create mode 100644 security/selinux/include/audit.h
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/