[GIT PULL] AppArmor updates for 6.11-rc1

[John Johansen]

Hi Linus,

I know this is running extremely late so I have only included bug fixes
and a few small cleanups.

In particular the cleanup
  optimization: try to avoid refing the label in apparmor_file_open
is nice to have for scaling on large systems, as it avoids take a ref count when
it isn't necessary. For the file open test resulting in

  kernel test robot noticed a 93.1% improvement of will-it-scale.per_process_ops on:


These patches have all been merge tested against your tree as of
this morning and regression tested against your tree as of yesterday.

thanks
- john




The following changes since commit 4cece764965020c22cff7665b18a012006359095:

  Linux 6.9-rc1 (2024-03-24 14:10:05 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2024-07-25

for you to fetch changes up to e0ff0cff1f6cdce0aa596aac04129893201c4162:

  apparmor: unpack transition table if dfa is not present (2024-07-24 11:15:06 -0700)

----------------------------------------------------------------
apparmor-pr-2024-07-24 PR 2024-07-25

+ Cleanups
      - optimization: try to avoid refing the label in apparmor_file_open
      - remove useless static inline function is_deleted
      - use kvfree_sensitive to free data->data
      - fix typo in kernel doc

+ Bug fixes
      - unpack transition table if dfa is not present
      - test: add MODULE_DESCRIPTION()
      - take nosymfollow flag into account
      - fix possible NULL pointer dereference
      - fix null pointer deref when receiving skb during sock creation

----------------------------------------------------------------
Alexander Mikhalitsyn (1):
      apparmor: take nosymfollow flag into account

Christian Göttsche (1):
      apparmor: fix typo in kernel doc

Colin Ian King (1):
      apparmor: remove useless static inline function is_deleted

Fedor Pchelkin (1):
      apparmor: use kvfree_sensitive to free data->data

Georgia Garcia (1):
      apparmor: unpack transition table if dfa is not present

Jeff Johnson (1):
      apparmor: test: add MODULE_DESCRIPTION()

Leesoo Ahn (1):
      apparmor: fix possible NULL pointer dereference

Mateusz Guzik (1):
      apparmor: try to avoid refing the label in apparmor_file_open

Xiao Liang (1):
      apparmor: Fix null pointer deref when receiving skb during sock creation

 security/apparmor/apparmorfs.c         |  4 ++++
 security/apparmor/file.c               | 13 ----------
 security/apparmor/include/cred.h       | 20 ++++++++++++++++
 security/apparmor/lsm.c                | 14 ++++++++---
 security/apparmor/mount.c              |  2 ++
 security/apparmor/policy.c             |  2 +-
 security/apparmor/policy_unpack.c      | 43 ++++++++++++++++++++--------------
 security/apparmor/policy_unpack_test.c |  1 +
 8 files changed, 65 insertions(+), 34 deletions(-)