[GIT PULL] selinux/selinux-pr-20231030
Paul Moore
paul at paul-moore.com
Tue Oct 31 02:16:31 UTC 2023
Hi Linus,
Seven SELinux patches for v6.7, the highlights are below:
* Improve the SELinux debugging configuration controls in Kconfig.
* Print additional information about the hash table chain lengths when
when printing SELinux debugging information.
* Simplify the SELinux access vector hash table calcaulations.
* Use a better hashing function for the SELinux role tansition hash
table.
* Improve SELinux load policy time through the use of optimized
functions for calculating the number of bits set in a field.
* Addition of a __counted_by annotation.
* Simplify the avtab_inert_node() function through a simplified
prototype.
Please merge for v6.7-rc1, thanks.
-Paul
--
The following changes since commit 0bb80ecc33a8fb5a682236443c1e740d5c917d1d:
Linux 6.6-rc1 (2023-09-10 16:28:41 -0700)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
tags/selinux-pr-20231030
for you to fetch changes up to 19c1c9916dbf9b05157a0c4970f61f952c0cb86a:
selinux: simplify avtab_insert_node() prototype
(2023-10-03 17:07:07 -0400)
----------------------------------------------------------------
selinux/stable-6.7 PR 20231030
----------------------------------------------------------------
Christian Göttsche (4):
selinux: print sum of chain lengths^2 for hash tables
selinux: improve debug configuration
selinux: simplify avtab slot calculation
selinux: improve role transition hashing
Jacob Satterfield (2):
selinux: hweight optimization in avtab_read_item
selinux: simplify avtab_insert_node() prototype
Kees Cook (1):
selinux: Annotate struct sidtab_str_cache with __counted_by
security/selinux/Kconfig | 10 ++++++++++
security/selinux/Makefile | 2 ++
security/selinux/ss/avtab.c | 37 +++++++++++--------------------------
security/selinux/ss/hashtab.c | 5 +++++
security/selinux/ss/hashtab.h | 1 +
security/selinux/ss/policydb.c | 6 +++---
security/selinux/ss/sidtab.c | 2 +-
7 files changed, 33 insertions(+), 30 deletions(-)
--
paul-moore.com
More information about the Linux-security-module-archive
mailing list