Backports the following three patches to fix the issue of IMA mishandling
LSM based rule during LSM policy update, causing a file to match an
unexpected rule.
GUO Zihua (1):
ima: Handle -ESTALE returned by ima_filter_rule_match()
Janne Karhunen (2):
LSM: switch to blocking policy update notifiers
ima: use the lsm policy update notifier
drivers/infiniband/core/device.c | 4 +-
include/linux/security.h | 12 +--
security/integrity/ima/ima.h | 2 +
security/integrity/ima/ima_main.c | 8 ++
security/integrity/ima/ima_policy.c | 147 +++++++++++++++++++++++-----
security/security.c | 23 +++--
security/selinux/hooks.c | 2 +-
security/selinux/selinuxfs.c | 2 +-
8 files changed, 154 insertions(+), 46 deletions(-)
--
2.17.1
[Public]
Hi,
This below patch from 6.2-rc1 was Cc to stable 6.0/6.1:
afa6646b1c5d ("drm/amdgpu: skip MES for S0ix as well since it's part of GFX")
However It didn't get picked up for 6.0.16 or 6.1.2. I also didn't see it in stable-queue.git/tree/queue-6.0 or stable-queue.git/tree/queue-6.1.
I double checked and it works on both 6.0.y and 6.1.y, and It fixes a bad suspend problem, so I wanted to double check it didn't get missed with the holiday shuffle.
Thanks!
Greetings from my side,
Before I introduce myself, I wish to say sorry to invade your privacy
and this letter is not a hoax mail, treat it seriously. My name's are
Mr.Patrick Joseph, I am writing you this mail to solicit for your
cooperation in a very confidential business transaction which involves
$27.5 million. The owner died in an aircraft crash without any
registered next of kin, several efforts were made to find his extended
family through their embassy without success. My proposition to you is
to present you to the bank as the next of kin to our bank late
customer Paul Louis Halley so that the bank will pay this funds to you
as his beneficiary. Reply me as soon as possible so that I will let
you know the next steps and procedures to follow in order to finalize
this transaction immediately.
Best Regards.
Mr.Patrick Joseph.
Backports the following two patches to fix the issue of IMA mishandling
LSM based rule during LSM policy update, causing a file to match an
unexpected rule.
Some changes were made to these patches, which was stated in the commit
message of corresponding patch.
GUO Zihua (1):
ima: Handle -ESTALE returned by ima_filter_rule_match()
Janne Karhunen (1):
ima: use the lsm policy update notifier
security/integrity/ima/ima.h | 2 +
security/integrity/ima/ima_main.c | 8 ++
security/integrity/ima/ima_policy.c | 153 +++++++++++++++++++++++-----
3 files changed, 137 insertions(+), 26 deletions(-)
--
2.17.1