Linus Torvalds a500db7819 selinux/stable-7.3 PR 20260903 ... -----BEGIN PGP SIGNATURE----- iQJIBAABCgAyFiEES0KozwfymdVUl37v6iDy2pc3iXMFAmqZ2MkUHHBhdWxAcGF1 bC1tb29yZS5jb20ACgkQ6iDy2pc3iXPIuw/+OzHPcHAwO9q+ZX6jysmxZqSR+X7w NmvTTMGgKA+J2bhmRxuLTApzfx8w0IOq5ZXrPSysszophVpwvtH+UqHr2wuC9pcb 0LO2vfJ4hr44+EKcajbjbwRf1zNpwjCYnIw2g6W5QdNFvnJVKoRLcYdUZzp2dVMl Q5hLeI2irijCOqxeIC4APOyXXUHhg418czvapq4M8MZtOcEICgkbdLYs/fglmo6M 8i90j+HShcbOIH6hO0VDAAnRyYS8JkRFhzXIzSKKf3dtQbUlAwl97laUT2C5jcwr zQmRfnsasGGUQj19hW73Ksn6MuHhMb7XKafbL+De3jD2yHpHEvgrbjUllRBaDjp1 J7V1q8B+FolD/T/Dceghs58lQk736KZvGvLEfoYiVde8BuhE0kqJWupf+KqECj18 Zv8iVuyBC9PkGQPeVTV3V0VPZBvgZCrWhaiVAXRYOY/KqxqXGIcjgeuPU+7VNYl8 lzvZDULYOJeiMSvkStFKy6RDtUtpxaMV4Pv3ZyRFX8p8QviyC/4WXy8DKlGkDCEn 3TBX+PgCC8mGjRegM6GQXp74h3qZ0nAzrcThqaGTQlKqD6SUFwQawes5aRR4GT8j idiRGm6zYoCvFmZ2YFkZ1/LNHkouLLClCOJ4hXcpl19mka/qtASneKJOxPI8cA7Z ZrZQkVNNJipKu1s= =/GJM -----END PGP SIGNATURE----- Merge tag 'selinux-pr-20260903' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux Pull SELinux fixes from Paul Moore: "Two SELinux fixes: one to fix how we lookup a BPF token's creator label to prevent a possible TOCTOU, and one to update Ondrej's email address" * tag 'selinux-pr-20260903' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux: MAINTAINERS, mailmap: update email address for Ondrej Mosnáček selinux: fix BPF token permission checks		2026-09-03 13:36:21 -07:00
..
apparmor	apparmor: policy_int make sure list heads are initialized before fail path	2026-08-26 00:03:13 -07:00
bpf	bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized	2026-06-30 16:31:56 +02:00
integrity	ima: measure userspace policy writes before parsing	2026-08-04 12:35:03 -04:00
ipe	treewide: change inode->i_ino from unsigned long to u64	2026-03-06 14:31:28 +01:00
keys	tpm-buf: Memory-safe allocations	2026-08-25 18:13:36 +03:00
landlock	landlock: Add tracepoints for ptrace and scope denials	2026-08-17 10:17:16 +02:00
loadpin	Convert 'alloc_flex' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
lockdown	lockdown: move initcalls to the LSM framework	2025-10-22 19:24:27 -04:00
safesetid	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
selinux	selinux: fix BPF token permission checks	2026-08-31 14:09:27 -04:00
smack	Patches for v7.3	2026-08-19 16:51:39 -07:00
tomoyo	tomoyo: use u64 for holding inode->i_ino value	2026-04-15 00:00:10 +09:00
yama	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
commoncap_test.c	security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns	2026-01-09 11:28:28 -06:00
commoncap.c	security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns	2026-01-09 11:28:28 -06:00
device_cgroup.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
inode.c	securityfs: use kstrdup_const() to manage symlink targets	2026-03-17 17:13:36 -04:00
Kconfig	proc: make PROC_MEM_FORCE_PTRACE the Kconfig default	2026-04-13 09:12:37 -07:00
Kconfig.hardening	hardening: Default randstruct off with rust for better allmodconfig support	2026-09-01 16:01:35 -07:00
lsm_audit.c	treewide: change inode->i_ino from unsigned long to u64	2026-03-06 14:31:28 +01:00
lsm_init.c	security: lsm: allow LSMs to register for late_initcall_sync init	2026-08-04 12:35:02 -04:00
lsm_notifier.c	lsm: split the notifier code out into lsm_notifier.c	2025-10-22 19:24:15 -04:00
lsm_syscalls.c	lsm: hold cred_guard_mutex for lsm_set_self_attr()	2026-05-14 16:47:59 -04:00
lsm.h	lsm: add backing_file LSM hooks	2026-04-03 16:53:50 -04:00
Makefile	lsm: split the init code out into lsm_init.c	2025-10-22 19:24:16 -04:00
min_addr.c	lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY	2026-01-29 13:56:53 -05:00
security.c	lsm: clarify security_task_prctl() hook documentation	2026-07-02 14:59:24 -04:00