Skip to content

The comedy of errors patchset (was: SELinux NetLabel updates)

Paul Moore lkml 2 versions – New

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v3 Latest2 patches 0 repliesNew
  2. v22 patches 3 repliesSuperseded

Patches in v3 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/2NetLabel: enable dynamic activation/deactivation of NetLabel/SELinux enforcementinclude/net/netlabel.h net/netlabel/netlabel_cipso_v4.c net/netlabel/netlabel_kapi.c +3 more+131 -350 replies
2/2SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabelsecurity/selinux/hooks.c security/selinux/netlabel.c+31 -310 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v3 yet.

Read the v3 thread

Cover letter [PATCH v3 0/2] The comedy of errors patchset (was: SELinux NetLabel updates)

This rev of the patchset solves both the original problem that Michal posted involving backwards compatibility with old SELinux policy as well as the problem Linus posted about the fix not working correctly when CONFIG_NETLABEL was not set. I also tried to fixup the #ifdefs in include/net/netlabel.h as suggested.

I've tested both of these patches, in order, and neither have caused problems (i.e. there shouldn't be any git bisect breakage issues if only the first patch is applied). I've also compiled both patches with and without CONFIG_NETLABEL and have not seen any problems.

Once again, thank you all for your patience.

Signature · 2 lines
paul moore
linux security @ hp

Read the cover letter in its thread