[GIT PULL] Smack patches for 6.19

Casey Schaufler casey at schaufler-ca.com
Sat Nov 29 20:24:38 UTC 2025


Hello Linus,

Here is the Smack pull request for v6.19.

It fairly large as Smack pulls go. There are fixes for several
cases where labels are treated inconsistently when imported
from user space. The assignment of extended attributes has
been cleaned up. There are also some documentation improvements.

The following changes since commit e04c78d86a9699d136910cfc0bdcf01087e3267e:

  Linux 6.16-rc2 (2025-06-15 13:49:41 -0700)

are available in the Git repository at:

  https://github.com/cschaufler/smack-next tags/Smack-for-6.19

for you to fetch changes up to 29c701f90b9341f1f9c1854a9c22b71c2318457d:

  Smack: function parameter 'gfp' not described (2025-11-11 12:00:18 -0800)

----------------------------------------------------------------
Patches for 6.19

----------------------------------------------------------------
Casey Schaufler (1):
      Smack: function parameter 'gfp' not described

Konstantin Andreev (8):
      smack: deduplicate "does access rule request transmutation"
      smack: fix bug: SMACK64TRANSMUTE set on non-directory
      smack: deduplicate xattr setting in smack_inode_init_security()
      smack: always "instantiate" inode in smack_inode_init_security()
      smack: fix bug: invalid label of unix socket file
      smack: fix bug: unprivileged task can create labels
      smack: fix bug: setting task label silently ignores input garbage
      smack: fix kernel-doc warnings for smk_import_valid_label()

 Documentation/admin-guide/LSM/Smack.rst |  16 +-
 security/smack/smack.h                  |   3 +
 security/smack/smack_access.c           |  96 ++++++++---
 security/smack/smack_lsm.c              | 279 +++++++++++++++++++++-----------
 4 files changed, 275 insertions(+), 119 deletions(-)




More information about the Linux-security-module-archive mailing list