Received-SPF: pass (google.com: domain of linux-kernel+bounces-99536-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) client-ip=2604:1380:4601:e00::3;
Message-ID: <5f321246-e0ba-4882-a42d-fe174d593aaf@schaufler-ca.com>
Date: Mon, 11 Mar 2024 13:47:16 -0700
Precedence: bulk
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: LSM List <linux-security-module@vger.kernel.org>,
 Linux kernel mailing list <linux-kernel@vger.kernel.org>,
 Casey Schaufler <casey@schaufler-ca.com>,
 roberto Sassu <roberto.sassu@huaweicloud.com>
From: Casey Schaufler <casey@schaufler-ca.com>
Subject: [GIT PULL] Smack patches for 6.9
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <5f321246-e0ba-4882-a42d-fe174d593aaf.ref@schaufler-ca.com>

Hello Linus,

Here is the Smack pull request for v6.9.

There are 6 patches. One is a simple refactoring to remove
code duplication. The other five, from Roberto Sassu, correct
the in-memory inode initialization path used by ramfs in Smack.
This is necessary for ramfs to correctly handle directory label
transmutation.

All has been in the next branch and pass all tests.

The following changes since commit 6613476e225e090cc9aad49be7fa504e290dd33d:

  Linux 6.8-rc1 (2024-01-21 14:11:32 -0800)

are available in the Git repository at:

  https://github.com/cschaufler/smack-next tags/Smack-for-6.9

for you to fetch changes up to 69b6d71052b54fb10feba68564ccb41c0f0ce1e9:

  Smack: use init_task_smack() in smack_cred_transfer() (2024-02-14 10:47:06 -0800)

----------------------------------------------------------------
Smack updates for v6.9.

Improvements to the initialization of in-memory inodes.
A fix in ramfs to propery ensure the initialization of
in-memory inodes.
Removal of duplicated code in smack_cred_transfer().

----------------------------------------------------------------
Casey Schaufler (1):
      Smack: use init_task_smack() in smack_cred_transfer()

Roberto Sassu (5):
      smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
      smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
      smack: Always determine inode labels in smack_inode_init_security()
      smack: Initialize the in-memory inode in smack_inode_init_security()
      ramfs: Initialize security of in-memory inodes

 fs/ramfs/inode.c           |  32 +++++++++++++-
 security/smack/smack_lsm.c | 102 +++++++++++++++++++++++++--------------------
 2 files changed, 87 insertions(+), 47 deletions(-)