Security testing tree patch review for 2.6.26

[Casey Schaufler]

--- James Morris <jmorris at namei.org> wrote:

> 
> Please review the following security patches for 2.6.26, which have
> been undergoing testing in the "next" tree and affect multiple LSMs.

I have done basic testing on this patchset and have not
encountered any problems from the Smack side. I have not
tested without Smack nor by implication with SELinux.


> 
> The following changes since commit 4b119e21d0c66c22e8ca03df05d9de623d0eb50f:
>   Linus Torvalds (1):
>         Linux 2.6.25
> 
> are available in the git repository at:
> 
>  
>
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6.git
> for-linus
> 
> Ahmed S. Darwish (10):
>       LSM: Introduce inode_getsecid and ipc_getsecid hooks
>       SELinux: setup new inode/ipc getsecid hooks
>       Audit: use new LSM hooks instead of SELinux exports
>       Netlink: Use generic LSM hook
>       SELinux: remove redundant exports
>       LSM/Audit: Introduce generic Audit LSM hooks
>       Audit: internally use the new LSM audit hooks
>       SELinux: use new audit hooks, remove redundant exports
>       Audit: Final renamings and cleanup
>       Security: Introduce security= boot parameter
> 
> James Morris (2):
>       Tell git about security/selinux/include/audit.h
>       security: fix up documentation for security_module_enable
> 
>  Documentation/kernel-parameters.txt |    6 ++
>  include/linux/audit.h               |   29 ++++++++
>  include/linux/security.h            |  114 +++++++++++++++++++++++++++++-
>  include/linux/selinux.h             |  134
> -----------------------------------
>  kernel/audit.c                      |   24 +++----
>  kernel/audit.h                      |   25 -------
>  kernel/auditfilter.c                |   99 ++++++++++----------------
>  kernel/auditsc.c                    |   74 ++++++++++---------
>  net/netlink/af_netlink.c            |    3 +-
>  security/dummy.c                    |   51 +++++++++++++-
>  security/security.c                 |   73 +++++++++++++++++++-
>  security/selinux/exports.c          |   42 -----------
>  security/selinux/hooks.c            |   34 ++++++++-
>  security/selinux/include/audit.h    |   65 +++++++++++++++++
>  security/selinux/ss/services.c      |   45 +++++++++---
>  security/smack/smack.h              |    2 +
>  security/smack/smack_lsm.c          |    7 ++-
>  security/smack/smackfs.c            |   11 +++-
>  18 files changed, 503 insertions(+), 335 deletions(-)
>  create mode 100644 security/selinux/include/audit.h
> --
> To unsubscribe from this list: send the line "unsubscribe
> linux-security-module" in
> the body of a message to majordomo at vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 
> 
> 


Casey Schaufler
casey at schaufler-ca.com