diff options
author | Linus Torvalds <torvalds@linux-foundation.org> | 2022-10-04 02:45:15 +0200 |
---|---|---|
committer | Linus Torvalds <torvalds@linux-foundation.org> | 2022-10-04 02:45:15 +0200 |
commit | e816da29bc0cf0504afddd314a2d71b694b5d7af (patch) | |
tree | 0152667d783ebbd4e3c7d7c6f72d095d3404ce0f /lib/bootconfig-data.S | |
parent | Merge tag 'integrity-v6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/z... (diff) | |
parent | selinux: remove runtime disable message in the install_policy.sh script (diff) | |
download | linux-e816da29bc0cf0504afddd314a2d71b694b5d7af.tar.xz linux-e816da29bc0cf0504afddd314a2d71b694b5d7af.zip |
Merge tag 'selinux-pr-20221003' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
Pull SELinux updates from Paul Moore:
"Six SELinux patches, all are simple and easily understood, but a list
of the highlights is below:
- Use 'grep -E' instead of 'egrep' in the SELinux policy install
script.
Fun fact, this seems to be GregKH's *second* dedicated SELinux
patch since we transitioned to git (ignoring merges, the SPDX
stuff, and a trivial fs reference removal when lustre was yanked);
the first was back in 2011 when selinuxfs was placed in
/sys/fs/selinux. Oh, the memories ...
- Convert the SELinux policy boolean values to use signed integer
types throughout the SELinux kernel code.
Prior to this we were using a mix of signed and unsigned integers
which was probably okay in this particular case, but it is
definitely not a good idea in general.
- Remove a reference to the SELinux runtime disable functionality in
/etc/selinux/config as we are in the process of deprecating that.
See [1] for more background on this if you missed the previous
notes on the deprecation.
- Minor cleanups: remove unneeded variables and function parameter
constification"
Link: https://github.com/SELinuxProject/selinux-kernel/wiki/DEPRECATE-runtime-disable [1]
* tag 'selinux-pr-20221003' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux:
selinux: remove runtime disable message in the install_policy.sh script
selinux: use "grep -E" instead of "egrep"
selinux: remove the unneeded result variable
selinux: declare read-only parameters const
selinux: use int arrays for boolean values
selinux: remove an unneeded variable in sel_make_class_dir_entries()
Diffstat (limited to 'lib/bootconfig-data.S')
0 files changed, 0 insertions, 0 deletions