linux-stable-mirror

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-04-03 12:05:13 +02:00

Files

Stephen Smalley acf9ab15ec selinux: change security_compute_sid to return the ssid or tsid on match

[ Upstream commit fde46f60f6 ]

If the end result of a security_compute_sid() computation matches the
ssid or tsid, return that SID rather than looking it up again. This
avoids the problem of multiple initial SIDs that map to the same
context.

Cc: stable@vger.kernel.org
Reported-by: Guido Trentalancia <guido@trentalancia.com>
Fixes: ae254858ce ("selinux: introduce an initial SID for early boot processes")
Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Tested-by: Guido Trentalancia <guido@trentalancia.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-07-10 16:05:04 +02:00

apparmor

apparmor: allocate xmatch for nullpdb inside aa_alloc_null

2025-01-23 17:23:05 +01:00

bpf

bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0

2024-09-11 10:11:36 -07:00

integrity

ima: process_measurement() needlessly takes inode_lock() on MAY_READ

2025-05-29 11:02:00 +02:00

ipe

ipe: fallback to platform keyring also if key in trusted keyring is rejected