On Mon, Oct 01, 2018 at 10:29:26AM +0200, Ondrej Mosnacek wrote:
Hi,
On Sat, Sep 29, 2018 at 2:10 PM gregkh@linuxfoundation.org wrote:
This is a note to let you know that I've just added the patch titled
audit: Fix extended comparison of GID/EGIDto the 4.18-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git%3Ba=su...
The filename of the patch is: audit-fix-extended-comparison-of-gid-egid.patch and it can be found in the queue-4.18 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let stable@vger.kernel.org know about it.
IIRC Paul didn't want this patch to go to stable (he asked me to remove the Cc: stable@... line), since the bug has been there for a long time and any user affected by it either doesn't care or might actually (maybe unknowingly) rely on it. I still kept the Fixes: line so it is clear which commit introduced the bug.
Paul, any comments?
In any case, if you decide to push this patch into stable (note that it is queued also for 4.14, 4.9, 4.4, and 3.18), then make sure to include also commit 4b09791ba059 ("cred: conditionally declare groups-related functions") to avoid build errors with CONFIG_MULTIUSER=n and CONFIG_AUDIT_SYSCALL=y. It is a non-functional commit for the rest of the kernel.
I've now dropped this from all of the stable queues, thanks.
greg k-h