{"push_id":1176845765,"size":21,"distinct_size":21,"ref":"refs/heads/mm-test","head":"aa593316dc6646ae78650bd0633103127d801ea8","before":"affe2a05b2a7ab109ad0ef23357a4fbfb3fdd045","commits":[{"sha":"59a57cc3a3ec78db31c87250961137d5a164b955","author":{"name":"Realex-fire","email":"c37adaead429e08f353d71de49b5929f34568588@yandex.ru"},"message":"Revert \"net: pass info struct via netdevice notifier\"\n\nThis reverts commit 78f52cb3ab64a94be05127f845296b1dc1d2f83e.","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/59a57cc3a3ec78db31c87250961137d5a164b955"},{"sha":"af66e44210e95b104ae867e3d9cecfbd8a7add82","author":{"name":"Richard Haines","email":"0fa87f366ff7633c0bd4103a1a46a5e21beaf50f@btinternet.com"},"message":"SELinux: Update policy version to support constraints info\n\nUpdate the policy version (POLICYDB_VERSION_CONSTRAINT_NAMES) to allow\nholding of policy source info for constraints.\n\nUpstream commit a660bec1d84ad19a39e380af129e207b3b8f609e\n\nSigned-off-by: Richard Haines <richard_c_haines@btinternet.com>\nAcked-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Paul Moore <pmoore@redhat.com>\nChange-Id: If419c7bfdea2f7006c9a62ea595f0cbfe5c78871","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/af66e44210e95b104ae867e3d9cecfbd8a7add82"},{"sha":"5c175b86da7c47f737d4b2aa0cb8b40a98b4da9a","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_NEWSPDINFO\n\ncommit 2b7834d3e1b828429faa5dc41a480919e52d3f31 upstream (net-next).\n\nThis new command is missing.\n\nChange-Id: If511000c19aa9af7220ff775d88ace9834b35dcb\nFixes: 880a6fab8f6b (\"xfrm: configure policy hash table thresholds by netlink\")\nReported-by: Christophe Gouault <christophe.gouault@6wind.com>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/5c175b86da7c47f737d4b2aa0cb8b40a98b4da9a"},{"sha":"b3b7e2c809bb01b47653102936df60b223169d65","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_GETSPDINFO\n\ncommit 5e6deebafb45fb271ae6939d48832e920b8fb74e upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Id0a0d9bf7a4af98a8f761fec902d1296138a911f\nFixes: ecfd6b183780 (\"[XFRM]: Export SPD info\")\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/b3b7e2c809bb01b47653102936df60b223169d65"},{"sha":"5f885f8b819d7079839d4a8799daae41b33e2754","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_[NEW|GET]SADINFO\n\ncommit 5b5800fad072133e4a9c2efbf735baaac83dec86 upstream (net-next).\n\nThese commands are missing.\n\nChange-Id: I3fd1d3d700592c653e1a5c5199125805d55aaa95\nFixes: 28d8909bc790 (\"[XFRM]: Export SAD info.\")\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/5f885f8b819d7079839d4a8799daae41b33e2754"},{"sha":"eae41038a7958aa0078eebb86d5e31c4e206f527","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_REPORT\n\ncommit b0b59b0056acd6f157a04cc895f7e24692fb08aa upstream (net-next).\n\nThis command is missing.\n\nChange-Id: I8fa3b1b9815296d3b001244d2212f79f5654bd01\nFixes: 97a64b4577ae (\"[XFRM]: Introduce XFRM_MSG_REPORT.\")\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/eae41038a7958aa0078eebb86d5e31c4e206f527"},{"sha":"e91433b0c380e643420fc8a2cd28265084939b42","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_MIGRATE\n\ncommit 8d465bb777179c4bea731b828ec484088cc9fbc1 upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Id2c9344ca1ab2c96e0b758ad1efb38e16cf23b86\nFixes: 5c79de6e79cd (\"[XFRM]: User interface for handling XFRM_MSG_MIGRATE\")\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/e91433b0c380e643420fc8a2cd28265084939b42"},{"sha":"acf4a5bb3644aaeae78034ccb665133cc723aa76","author":{"name":"Nicolas Dichtel","email":"6738a2db8b42127254341bdb65a9775d52a2feaa@6wind.com"},"message":"selinux/nlmsg: add XFRM_MSG_MAPPING\n\ncommit bd2cba07381a6dba60bc1c87ed8b37931d244da1 upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Ida52130382e42355e5f3b39134aa61a1ea98026d\nFixes: 3a2dfbe8acb1 (\"xfrm: Notify changes in UDP encapsulation via netlink\")\nCC: Martin Willi <martin@strongswan.org>\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/acf4a5bb3644aaeae78034ccb665133cc723aa76"},{"sha":"a9291da4de5cb22f54488a4a490e0e5de9bc65f6","author":{"name":"Stephen Smalley","email":"a113c662ba7e86bc1a8f97e28bfedcdc6b0de5bd@tycho.nsa.gov"},"message":"selinux: fix inode security list corruption\n\ncommit 923190d32de4428afbea5e5773be86bea60a9925 upstream.\n\nsb_finish_set_opts() can race with inode_free_security()\nwhen initializing inode security structures for inodes\ncreated prior to initial policy load or by the filesystem\nduring ->mount().   This appears to have always been\na possible race, but commit 3dc91d4 (\"SELinux:  Fix possible\nNULL pointer dereference in selinux_inode_permission()\")\nmade it more evident by immediately reusing the unioned\nlist/rcu element  of the inode security structure for call_rcu()\nupon an inode_free_security().  But the underlying issue\nwas already present before that commit as a possible use-after-free\nof isec.\n\nShivnandan Kumar reported the list corruption and proposed\na patch to split the list and rcu elements out of the union\nas separate fields of the inode_security_struct so that setting\nthe rcu element would not affect the list element.  However,\nthis would merely hide the issue and not truly fix the code.\n\nThis patch instead moves up the deletion of the list entry\nprior to dropping the sbsec->isec_lock initially.  Then,\nif the inode is dropped subsequently, there will be no further\nreferences to the isec.\n\nChange-Id: Iac9264851e98933deabedaa9c4ead434669a07a8\nReported-by: Shivnandan Kumar <shivnandan.k@samsung.com>\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Paul Moore <pmoore@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/a9291da4de5cb22f54488a4a490e0e5de9bc65f6"},{"sha":"68a31caefc97ffef2bb03dc7ee34c2e0e75801fd","author":{"name":"Stephen Smalley","email":"a113c662ba7e86bc1a8f97e28bfedcdc6b0de5bd@tycho.nsa.gov"},"message":"selinux:  Report permissive mode in avc: denied messages.\n\nWe cannot presently tell from an avc: denied message whether access was in\nfact denied or was allowed due to global or per-domain permissive mode.\nAdd a permissive= field to the avc message to reflect this information.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>\nAcked-by: Eric Paris <eparis@redhat.com>\nSigned-off-by: Paul Moore <pmoore@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/68a31caefc97ffef2bb03dc7ee34c2e0e75801fd"},{"sha":"9296f8c58239edaadbaae74eed6b63eff1e31671","author":{"name":"Realex-fire","email":"c37adaead429e08f353d71de49b5929f34568588@yandex.ru"},"message":"fix marge security/selinux/ss","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/9296f8c58239edaadbaae74eed6b63eff1e31671"},{"sha":"aed947c59c7bc6760f630ab8e482f7d3ab4b5175","author":{"name":"Jeff Vander Stoep","email":"3c7c1df314a95c4ce859cc668e778f3e3567dbe8@google.com"},"message":"selinux: extended permissions for ioctls\n\nAdd extended permissions logic to selinux. Extended permissions\nprovides additional permissions in 256 bit increments. Extend the\ngeneric ioctl permission check to use the extended permissions for\nper-command filtering. Source/target/class sets including the ioctl\npermission may additionally include a set of commands. Example:\n\nallowxperm <source> <target>:<class> ioctl unpriv_app_socket_cmds\nauditallowxperm <source> <target>:<class> ioctl priv_gpu_cmds\n\nWhere unpriv_app_socket_cmds and priv_gpu_cmds are macros\nrepresenting commonly granted sets of ioctl commands.\n\nWhen ioctl commands are omitted only the permissions are checked.\nThis feature is intended to provide finer granularity for the ioctl\npermission that may be too imprecise. For example, the same driver\nmay use ioctls to provide important and benign functionality such as\ndriver version or socket type as well as dangerous capabilities such\nas debugging features, read/write/execute to physical memory or\naccess to sensitive data. Per-command filtering provides a mechanism\nto reduce the attack surface of the kernel, and limit applications\nto the subset of commands required.\n\nThe format of the policy binary has been modified to include ioctl\ncommands, and the policy version number has been incremented to\nPOLICYDB_VERSION_XPERMS_IOCTL=30 to account for the format\nchange.\n\nThe extended permissions logic is deliberately generic to allow\ncomponents to be reused e.g. netlink filters\n\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\nAcked-by: Nick Kralevich <nnk@google.com>\nSigned-off-by: Paul Moore <pmoore@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/aed947c59c7bc6760f630ab8e482f7d3ab4b5175"},{"sha":"e8b480de52ea644c15830441b77be23cc5eab790","author":{"name":"Jeff Vander Stoep","email":"3c7c1df314a95c4ce859cc668e778f3e3567dbe8@google.com"},"message":"security: add ioctl specific auditing to lsm_audit\n\nAdd information about ioctl calls to the LSM audit data. Log the\nfile path and command number.\n\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\nAcked-by: Nick Kralevich <nnk@google.com>\n[PM: subject line tweak]\nSigned-off-by: Paul Moore <pmoore@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/e8b480de52ea644c15830441b77be23cc5eab790"},{"sha":"78cb5dca3c3d86a5a1d75fc2ea2186c1af1a2206","author":{"name":"Realex-fire","email":"c37adaead429e08f353d71de49b5929f34568588@yandex.ru"},"message":"Fix selinux merge","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/78cb5dca3c3d86a5a1d75fc2ea2186c1af1a2206"},{"sha":"ee069aa865cdaf3adb5975b119778276a72da069","author":{"name":"Mark Salyzyn","email":"4814ffc71be21311f04ef34122c19152acc840c4@android.com"},"message":"selinux: add security in-core xattr support for pstore and debugfs\n\n- add \"pstore\" and \"debugfs\" to list of in-core exceptions\n- change fstype checks to boolean equation\n- change from strncmp to strcmp for checking\n\nSigned-off-by: Mark Salyzyn <salyzyn@android.com>\nAcked-by:  Stephen Smalley <sds@tycho.nsa.gov>\n[PM: tweaked the subject line prefix to \"selinux\"]\nSigned-off-by: Paul Moore <pmoore@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/ee069aa865cdaf3adb5975b119778276a72da069"},{"sha":"a94ae224244f843818fb14cbf2adbad39b69a8cc","author":{"name":"J. Bruce Fields","email":"51704cedabd58a1ac59e719bc6120546fc37be9f@redhat.com"},"message":"selinux: fix setting of security labels on NFS\n\nBefore calling into the filesystem, vfs_setxattr calls\nsecurity_inode_setxattr, which ends up calling selinux_inode_setxattr in\nour case.  That returns -EOPNOTSUPP whenever SBLABEL_MNT is not set.\nSBLABEL_MNT was supposed to be set by sb_finish_set_opts, which sets it\nonly if selinux_is_sblabel_mnt returns true.\n\nThe selinux_is_sblabel_mnt logic was broken by eadcabc697e9 \"SELinux: do\nall flags twiddling in one place\", which didn't take into the account\nthe SECURITY_FS_USE_NATIVE behavior that had been introduced for nfs\nwith eb9ae686507b \"SELinux: Add new labeling type native labels\".\n\nThis caused setxattr's of security labels over NFSv4.2 to fail.\n\nCc: stable@kernel.org # 3.13\nCc: Eric Paris <eparis@redhat.com>\nCc: David Quigley <dpquigl@davequigley.com>\nReported-by: Richard Chan <rc556677@outlook.com>\nSigned-off-by: J. Bruce Fields <bfields@redhat.com>\nAcked-by: Stephen Smalley <sds@tycho.nsa.gov>\n[PM: added the stable dependency]\nSigned-off-by: Paul Moore <pmoore@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/a94ae224244f843818fb14cbf2adbad39b69a8cc"},{"sha":"e85badddffbaf35b04a1112d2cca5a5ad61d5f93","author":{"name":"Jingoo Han","email":"276d07efb303e21f368940bed2f018bb8fee1812@samsung.com"},"message":"security: replace strict_strto*() with kstrto*()\n\nThe usage of strict_strto*() is not preferred, because\nstrict_strto*() is obsolete. Thus, kstrto*() should be\nused.\n\nSigned-off-by: Jingoo Han <jg1.han@samsung.com>\nSigned-off-by: James Morris <james.l.morris@oracle.com>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/e85badddffbaf35b04a1112d2cca5a5ad61d5f93"},{"sha":"b5c9436f3e060ad5b180263336a1fef785ab0ba5","author":{"name":"Djalal Harouni","email":"4669396459e8f0b901634ccadfc0bb83cfa49e01@opendz.org"},"message":"procfs: make /proc/*/pagemap 0400\n\nThe /proc/*/pagemap contain sensitive information and currently its mode\nis 0444.  Change this to 0400, so the VFS will prevent unprivileged\nprocesses from getting file descriptors on arbitrary privileged\n/proc/*/pagemap files.\n\nThis reduces the scope of address space leaking and bypasses by protecting\nalready running processes.\n\nSigned-off-by: Djalal Harouni <tixxdz@opendz.org>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Andy Lutomirski <luto@amacapital.net>\nCc: Eric W. Biederman <ebiederm@xmission.com>\nCc: Al Viro <viro@zeniv.linux.org.uk>\nCc: Oleg Nesterov <oleg@redhat.com>\nCc: Ingo Molnar <mingo@kernel.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/b5c9436f3e060ad5b180263336a1fef785ab0ba5"},{"sha":"2109aa82de7aba5eb736551c2655dfc298cfa6a3","author":{"name":"Djalal Harouni","email":"4669396459e8f0b901634ccadfc0bb83cfa49e01@opendz.org"},"message":"procfs: make /proc/*/{stack,syscall,personality} 0400\n\nThese procfs files contain sensitive information and currently their\nmode is 0444.  Change this to 0400, so the VFS will be able to block\nunprivileged processes from getting file descriptors on arbitrary\nprivileged /proc/*/{stack,syscall,personality} files.\n\nThis reduces the scope of ASLR leaking and bypasses by protecting already\nrunning processes.\n\nSigned-off-by: Djalal Harouni <tixxdz@opendz.org>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Andy Lutomirski <luto@amacapital.net>\nCc: Eric W. Biederman <ebiederm@xmission.com>\nCc: Al Viro <viro@zeniv.linux.org.uk>\nCc: Oleg Nesterov <oleg@redhat.com>\nCc: Ingo Molnar <mingo@kernel.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/2109aa82de7aba5eb736551c2655dfc298cfa6a3"},{"sha":"0f7228c9e4669f6a7e621b24cc6e26f954a244d8","author":{"name":"Realex-fire","email":"c37adaead429e08f353d71de49b5929f34568588@yandex.ru"},"message":"Update lsm_audit with linux 3.16","distinct":true,"url":"https://api.github.com/repos/gsstudios/Dorimanx-SG2-I9100-Kernel/commits/0f7228c9e4669f6a7e621b24cc6e26f954a244d8"}]}
{"actor":{"display_login":"gsstudios"}}