• Linus Torvalds's avatar
    Merge tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm · c76ff350
    Linus Torvalds authored
    Pull lsm updates from Paul Moore:
    
     - Improve the error handling in the device cgroup such that memory
       allocation failures when updating the access policy do not
       potentially alter the policy.
    
     - Some minor fixes to reiserfs to ensure that it properly releases
       LSM-related xattr values.
    
     - Update the security_socket_getpeersec_stream() LSM hook to take
       sockptr_t values.
    
       Previously the net/BPF folks updated the getsockopt code in the
       network stack to leverage the sockptr_t type to make it easier to
       pass both kernel and __user pointers, but unfortunately when they did
       so they didn't convert the LSM hook.
    
       While there was/is no immediate risk by not converting the LSM hook,
       it seems like this is a mistake waiting to happen so this patch
       proactively does the LSM hook conversion.
    
     - Convert vfs_getxattr_alloc() to return an int instead of a ssize_t
       and cleanup the callers. Internally the function was never going to
       return anything larger than an int and the callers were doing some
       very odd things casting the return value; this patch fixes all that
       and helps bring a bit of sanity to vfs_getxattr_alloc() and its
       callers.
    
     - More verbose, and helpful, LSM debug output when the system is booted
       with "lsm.debug" on the command line. There are examples in the
       commit description, but the quick summary is that this patch provides
       better information about which LSMs are enabled and the ordering in
       which they are processed.
    
     - General comment and kernel-doc fixes and cleanups.
    
    * tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm:
      lsm: Fix description of fs_context_parse_param
      lsm: Add/fix return values in lsm_hooks.h and fix formatting
      lsm: Clarify documentation of vm_enough_memory hook
      reiserfs: Add missing calls to reiserfs_security_free()
      lsm,fs: fix vfs_getxattr_alloc() return type and caller error paths
      device_cgroup: Roll back to original exceptions after copy failure
      LSM: Better reporting of actual LSMs at boot
      lsm: make security_socket_getpeersec_stream() sockptr_t safe
      audit: Fix some kernel-doc warnings
      lsm: remove obsoleted comments for security hooks
      fs: edit a comment made in bad taste
    c76ff350
namei.c 44.3 KB