Kernel

[PATCH v2 05/14] security: imbed evm calls in security hooks
Imbed the evm calls evm_inode_setxattr(), evm_inode_post_setxattr(), evm_inode_removexattr() in the security hooks. evm_inode_setxattr() protects security.evm xattr. evm_inode_post_setxattr() and evm_inode_removexattr() updates the hmac associated with an inode. (Assumes an LSM module protects the setting/remov... 22 Jul 2010 16:55

[PATCH v2 06/14] evm: inode post removexattr
When an EVM protected extended attribute is removed, update 'security.evm'. Signed-off-by: Mimi Zohar <zohar(a)us.ibm.com> Acked-by: Serge Hallyn <serue(a)us.ibm.com> --- fs/xattr.c | 5 ++++- include/linux/evm.h | 9 +++++++++ 2 files changed, 13 insertions(+), 1 deletions(-) diff --git a/fs/xat... 22 Jul 2010 16:55

drm: use workqueue instead of slow-work
On 07/20/2010 10:35 PM, Tejun Heo wrote: Workqueue can now handle high concurrency. Convert drm_crtc_helper to use system_nrt_wq instead of slow-work. The conversion is mostly straight forward. One difference is that drm_helper_hpd_irq_event() no longer blocks and can be called from any context. S... 22 Jul 2010 18:01

[PATCH v2 04/14] ima: move ima_file_free before releasing the file
Integrity appraisal measures files on file_free and stores the file measurement as an xattr. Measure the file before releasing it. Signed-off-by: Mimi Zohar <zohar(a)us.ibm.com> Acked-by: Serge Hallyn <serue(a)us.ibm.com> --- fs/file_table.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --gi... 22 Jul 2010 16:55

[PATCH v2 02/14] xattr: define vfs_getxattr_alloc and vfs_xattr_cmp
vfs_getxattr_alloc() and vfs_xattr_cmp() are two new kernel xattr helper functions. vfs_getxattr_alloc() first allocates memory for the requested xattr and then retrieves it. vfs_xattr_cmp() compares a given value with the contents of an extended attribute. Signed-off-by: Mimi Zohar <zohar(a)us.ibm.com> Acked-by:... 22 Jul 2010 16:55

[PATCH v2 11/14] ima: appraise default rules
Unlike the IMA measurement policy, the appraise policy can not be dependent on runtime process information, such as the task uid, as the 'security.ima' xattr is written on file close and must be updated each time the file changes, regardless of the current task uid. The appraise default policy appraises all files o... 22 Jul 2010 16:55

[PATCH v2 00/14] EVM
Am reposting the EVM and IMA appraisal patches with the following changes: - adds Documentation/ABI/testing/evm - removed leading blanks (checkpatch.pl) - removed file trailing blank lines (git quiltimport) - added include files, where functions are first defined, to resolve 'symbol not declared, should be stati... 22 Jul 2010 16:55

[PATCH 1/2] perf annotate: Fix handling of goto labels that are valid hex numbers
From: Arnaldo Carvalho de Melo <acme(a)redhat.com> When parsing the objdump disassembly output we can have goto labels that are valid hex numbers and thus get confused with lines with machine code. Handle the common case of a label that has nothing after it and other cases where there is just source code by vali... 22 Jul 2010 16:55

[PATCH 2/2] perf tools: Fix fallback to cplus_demangle() when bfd_demangle() is not available
From: Conny Seidel <conny.seidel(a)amd.com> make version 3.80 doesn't support "else ifdef" on the same line, also it doesn't support unindented nested constructs. Build fails with: Makefile:608: Extraneous text after `else' directive Makefile:611: *** only one `else' per conditional. Stop. This patch fixes t... 22 Jul 2010 16:55

Fix corruption of skb csum field in pskb_expand_head() of net/core/skbuff.c
From: Andrea Shepard <andrea(a)persephoneslair.org> Date: Thu, 22 Jul 2010 12:12:35 -0700 Make pskb_expand_head() check ip_summed to make sure csum_start is really csum_start and not csum before adjusting it. .... Signed-off-by: Andrea Shepard <andrea(a)persephoneslair.org> Applied, but your email client co... 22 Jul 2010 16:55