[GIT PULL] lsm/lsm-pr-20231030

From: Paul Moore
Date: Mon Oct 30 2023 - 22:25:34 EST


Hi Linus,

Seven LSM patches for v6.7, the highlights are below:

* Add new credential functions, get_cred_many() and put_cred_many() to
save some atomic_t operations for a few operations. While not strictly
LSM related, this patchset had been rotting on the mailing lists for
some time and since the LSMs do care a lot about credentials I thought
it reasonable to give this patch a home.

* Five patches to constify different LSM hook parameters.

* Fix a spelling mistake.

Please merge for v6.7-rc1, thanks.
-Paul

--
The following changes since commit 0bb80ecc33a8fb5a682236443c1e740d5c917d1d:

Linux 6.6-rc1 (2023-09-10 16:28:41 -0700)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm.git
tags/lsm-pr-20231030

for you to fetch changes up to e508560672890b2873c89258b88fade1356392ce:

lsm: fix a spelling mistake (2023-10-04 16:19:29 -0400)

----------------------------------------------------------------
lsm/stable-6.7 PR 20231030

----------------------------------------------------------------
Khadija Kamran (5):
lsm: constify 'sb' parameter in security_quotactl()
lsm: constify 'file' parameter in security_bprm_creds_from_file()
lsm: constify 'bprm' parameter in security_bprm_committing_creds()
lsm: constify 'bprm' parameter in security_bprm_committed_creds()
lsm: constify 'sb' parameter in security_sb_kern_mount()

Mateusz Guzik (1):
cred: add get_cred_many and put_cred_many

Paul Moore (1):
lsm: fix a spelling mistake

include/linux/cred.h | 59 ++++++++++++++++++++++++++++++++-----
include/linux/fs.h | 2 +-
include/linux/lsm_hook_defs.h | 10 ++++----
include/linux/security.h | 20 +++++++--------
kernel/cred.c | 26 +++++++++++--------
security/apparmor/lsm.c | 4 +--
security/commoncap.c | 4 +--
security/security.c | 12 ++++-----
security/selinux/hooks.c | 10 ++++----
security/tomoyo/tomoyo.c | 2 +-
10 files changed, 97 insertions(+), 52 deletions(-)

--
paul-moore.com