kernel/git/next/linux-next.git/security, branch masterThe linux-next integration testing treehttps://git.rulkc.org/pub/scm/linux/kernel/git/next/linux-next.git/atom?h=master2026-07-06T14:09:24+00:00Merge branch 'next' of https://git.kernel.org/pub/scm/linux/kernel/git/mic/linux.git2026-07-06T14:09:24+00:00Mark Brownbroonie@kernel.org2026-07-06T14:09:24+00:00urn:sha1:3b882e1e1a4582aa39cf1aac380dd8e45ffda326Merge branch 'master' of git://git.code.sf.net/p/tomoyo/tomoyo.git2026-07-06T13:53:42+00:00Mark Brownbroonie@kernel.org2026-07-06T13:53:42+00:00urn:sha1:8c8c3cbc6977f456289d406241fa19d957281df6Merge branch 'next' of https://github.com/cschaufler/smack-next2026-07-06T13:53:40+00:00Mark Brownbroonie@kernel.org2026-07-06T13:53:40+00:00urn:sha1:bfb669ccae628b14d5bf57d84aebcc704d9a8889Merge branch 'next' of https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git2026-07-06T13:53:36+00:00Mark Brownbroonie@kernel.org2026-07-06T13:53:36+00:00urn:sha1:a8ef539185fa47a18e50edaaddc16b8a7bc44e85Merge branch 'apparmor-next' of https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor2026-07-06T13:53:35+00:00Mark Brownbroonie@kernel.org2026-07-06T13:53:35+00:00urn:sha1:af08992ee167ececa094117817ef6baad8dd1c90Merge branch 'next' of https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm.git2026-07-06T13:53:33+00:00Mark Brownbroonie@kernel.org2026-07-06T13:53:33+00:00urn:sha1:0c795db2b766fd808a1c4ee3f2f9f4d866805b5flandlock: Fix kernel-doc for the nested quiet layer flag2026-07-03T14:19:02+00:00Mickaël Salaünmic@digikod.net2026-07-03T14:17:09+00:00urn:sha1:98c522eb8d64c67a82d489dd9b616a45851553e1
kernel-doc emits "Excess struct member 'quiet' description in
'landlock_layer'" because "quiet" is a bitfield inside the named nested
struct "flags", but its inline comment used the bare member name
"@quiet:", which kernel-doc attributes to the enclosing landlock_layer.
Use the canonical dotted notation "@flags.quiet:" so kernel-doc resolves
the nested member, and include it in the generated documentation.
Cc: Justin Suess <utilityemal77@gmail.com>
Cc: Tingmao Wang <m@maowtm.org>
Fixes: a260c0055665 ("landlock: Add a place for flags to layer rules")
Link: https://patch.msgid.link/20260703141711.2016964-1-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
lsm: clarify security_task_prctl() hook documentation2026-07-02T18:59:24+00:00Bill Robertsbill.roberts@arm.com2026-06-15T20:03:25+00:00urn:sha1:149b192e376d746bf7b8e1e02541c2256c3b17f0
The task_prctl hook comment incorrectly described the hook as checking
whether a prctl operation is allowed. In reality, the hook exists for
LSMs to handle LSM-specific prctl operations.
Update the function description and kernel-doc comment to reflect the
actual behavior. The old wording appears to have been copied from other
permission-check hooks despite differing semantics.
Signed-off-by: Bill Roberts <bill.roberts@arm.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: Serge Hallyn <serge@hallyn.com>
[PM: subj tweak, comment tweak -> "prctl to prctl()" ]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Automated merge of 'dev' into 'next'2026-07-02T16:36:41+00:00Paul Moorepaul@paul-moore.com2026-07-02T16:36:41+00:00urn:sha1:ae3d476caeba0bb7779334b1ce9d9a795ed602d2
* dev:
selinux: tighten type validation during policy load
selinux: drop unnecessary goto and label from avc_alloc_node()
selinux: convert int flags to bool flags in ss/services.c
selinux: clean up selinuxfs resources on init failure
selinux: hooks: use kmalloc() to allocate path buffer
selinux: tighten type validation during policy load2026-07-02T16:36:15+00:00Stephen Smalleystephen.smalley.work@gmail.com2026-05-07T16:16:34+00:00urn:sha1:ef0740b4b75fe48fb411b2a76aafbab0cdd6b0ba
Tighten type validation during policy load to improve robustness in
the face of ill-formed policies.
Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>