June 2019 - Linux-stable-mirror

by CKI Project

Hello, We ran automated tests on a patchset that was proposed for merging into this kernel tree. The patches were applied to: Kernel repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: 2f7d9d47575e - Linux 5.1.7 The results of these automated tests are provided below. Overall result: PASSED Merge: OK Compile: OK Tests: OK We hope that these logs can help you find the problem quickly. For the full detail on our testing procedures, please scroll to the bottom of this message. Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________ Merge testing ------------- We cloned this repository and checked out the following commit: Repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: 2f7d9d47575e - Linux 5.1.7 We then merged the patchset with `git am`: sparc64-fix-regression-in-non-hypervisor-tlb-flush-xcall.patch include-linux-bitops.h-sanitize-rotate-primitives.patch xhci-update-bounce-buffer-with-correct-sg-num.patch xhci-use-zu-for-printing-size_t-type.patch xhci-convert-xhci_handshake-to-use-readl_poll_timeout_atomic.patch usb-xhci-avoid-null-pointer-deref-when-bos-field-is-null.patch usbip-usbip_host-fix-bug-sleeping-function-called-from-invalid-context.patch usbip-usbip_host-fix-stub_dev-lock-context-imbalance-regression.patch usb-fix-slab-out-of-bounds-write-in-usb_get_bos_descriptor.patch usb-sisusbvga-fix-oops-in-error-path-of-sisusb_probe.patch usb-add-lpm-quirk-for-surface-dock-gige-adapter.patch usb-rio500-refuse-more-than-one-device-at-a-time.patch usb-rio500-fix-memory-leak-in-close-after-disconnect.patch media-usb-siano-fix-general-protection-fault-in-smsusb.patch media-usb-siano-fix-false-positive-uninitialized-variable-warning.patch media-smsusb-better-handle-optional-alignment.patch brcmfmac-fix-null-pointer-derefence-during-usb-disconnect.patch scsi-zfcp-fix-missing-zfcp_port-reference-put-on-ebusy-from-port_remove.patch scsi-zfcp-fix-to-prevent-port_remove-with-pure-auto-scan-luns-only-sdevs.patch tracing-avoid-memory-leak-in-predicate_parse.patch btrfs-fix-wrong-ctime-and-mtime-of-a-directory-after-log-replay.patch btrfs-fix-race-updating-log-root-item-during-fsync.patch btrfs-fix-fsync-not-persisting-changed-attributes-of-a-directory.patch btrfs-correct-zstd-workspace-manager-lock-to-use-spin_lock_bh.patch btrfs-qgroup-check-bg-while-resuming-relocation-to-avoid-null-pointer-dereference.patch btrfs-incremental-send-fix-file-corruption-when-no-holes-feature-is-enabled.patch btrfs-reloc-also-queue-orphan-reloc-tree-for-cleanup-to-avoid-bug_on.patch iio-dac-ds4422-ds4424-fix-chip-verification.patch iio-adc-ads124-avoid-buffer-overflow.patch iio-adc-modify-npcm-adc-read-reference-voltage.patch iio-adc-ti-ads8688-fix-timestamp-is-not-updated-in-buffer.patch s390-crypto-fix-gcm-aes-s390-selftest-failures.patch s390-crypto-fix-possible-sleep-during-spinlock-aquired.patch kvm-ppc-book3s-hv-xive-do-not-clear-irq-data-of-passthrough-interrupts.patch kvm-ppc-book3s-hv-fix-lockdep-warning-when-entering-guest-on-power9.patch kvm-ppc-book3s-hv-restore-sprg3-in-kvmhv_p9_guest_entry.patch powerpc-perf-fix-mmcra-corruption-by-bhrb_filter.patch powerpc-kexec-fix-loading-of-kernel-initramfs-with-kexec_file_load.patch alsa-line6-assure-canceling-delayed-work-at-disconnection.patch alsa-hda-realtek-set-default-power-save-node-to-0.patch alsa-hda-realtek-improve-the-headset-mic-for-acer-aspire-laptops.patch Compile testing --------------- We compiled the kernel for 4 architectures: aarch64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_5.1-aa… kernel build: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_5.1-aa… ppc64le: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_5.1-pp… kernel build: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_5.1-pp… s390x: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_5.1-s390… kernel build: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_5.1-s390… x86_64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_5.1-x86… kernel build: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_5.1-x86… Hardware testing ---------------- We booted each kernel and ran the following tests: aarch64: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. ppc64le: Host 1: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] Host 2: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ AMTU (Abstract Machine Test Utility) [4] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] ✅ Usex - version 1.9-29 [9] s390x: Host 1: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] 🚧 ✅ stress: stress-ng [10] Host 2: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] x86_64: Host 1: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] Host 2: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ AMTU (Abstract Machine Test Utility) [4] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] ✅ Usex - version 1.9-29 [9] 🚧 ✅ stress: stress-ng [10] Test source: 💚 Pull requests are welcome for new tests or improvements to existing tests! [0]: https://github.com/CKI-project/tests-beaker/archive/master.zip#distribution… [1]: https://github.com/CKI-project/tests-beaker/archive/master.zip#/packages/se… [2]: https://github.com/CKI-project/tests-beaker/archive/master.zip#distribution… [3]: https://github.com/CKI-project/tests-beaker/archive/master.zip#filesystems/… [4]: https://github.com/CKI-project/tests-beaker/archive/master.zip#misc/amtu [5]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/aud… [6]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/htt… [7]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/iot… [8]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/tun… [9]: https://github.com/CKI-project/tests-beaker/archive/master.zip#standards/us… [10]: https://github.com/CKI-project/tests-beaker/archive/master.zip#stress/stres… Waived tests (marked with 🚧) ----------------------------- This test run included waived tests. Such tests are executed but their results are not taken into account. Tests are waived when their results are not reliable enough, e.g. when they're just introduced or are being fixed.

5 years, 6 months

1
0
0 0

stable-rc/linux-5.0.y boot: 134 boots: 0 failed, 122 passed with 11 offline, 1 untried/unknown (v5.0.21)

by kernelci.org bot

stable-rc/linux-5.0.y boot: 134 boots: 0 failed, 122 passed with 11 offline, 1 untried/unknown (v5.0.21) Full Boot Summary: https://kernelci.org/boot/all/job/stable-rc/branch/linux-5.0.y/kernel/v5.0.… Full Build Summary: https://kernelci.org/build/stable-rc/branch/linux-5.0.y/kernel/v5.0.21/ Tree: stable-rc Branch: linux-5.0.y Git Describe: v5.0.21 Git Commit: fd1594eb706427cc0d88fdfc2c1dbecd5abe7a83 Git URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git Tested: 74 unique boards, 23 SoC families, 14 builds out of 208 Offline Platforms: arm: bcm2835_defconfig: gcc-8 bcm2835-rpi-b: 1 offline lab sama5_defconfig: gcc-8 at91-sama5d4_xplained: 1 offline lab at91-sama5d4ek: 1 offline lab multi_v7_defconfig: gcc-8 alpine-db: 1 offline lab at91-sama5d4_xplained: 1 offline lab at91-sama5d4ek: 1 offline lab sun5i-r8-chip: 1 offline lab sunxi_defconfig: gcc-8 sun5i-r8-chip: 1 offline lab arm64: defconfig: gcc-8 apq8016-sbc: 1 offline lab juno-r2: 1 offline lab mt7622-rfb1: 1 offline lab --- For more info write to <info(a)kernelci.org>

5 years, 6 months

1
0
0 0

✅ PASS: Stable queue: queue-5.1

by CKI Project

Hello, We ran automated tests on a patchset that was proposed for merging into this kernel tree. The patches were applied to: Kernel repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: 2f7d9d47575e - Linux 5.1.7 The results of these automated tests are provided below. Overall result: PASSED Merge: OK Compile: OK Tests: OK We hope that these logs can help you find the problem quickly. For the full detail on our testing procedures, please scroll to the bottom of this message. Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________ Merge testing ------------- We cloned this repository and checked out the following commit: Repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: 2f7d9d47575e - Linux 5.1.7 We then merged the patchset with `git am`: sparc64-fix-regression-in-non-hypervisor-tlb-flush-xcall.patch include-linux-bitops.h-sanitize-rotate-primitives.patch xhci-update-bounce-buffer-with-correct-sg-num.patch xhci-use-zu-for-printing-size_t-type.patch xhci-convert-xhci_handshake-to-use-readl_poll_timeout_atomic.patch usb-xhci-avoid-null-pointer-deref-when-bos-field-is-null.patch usbip-usbip_host-fix-bug-sleeping-function-called-from-invalid-context.patch usbip-usbip_host-fix-stub_dev-lock-context-imbalance-regression.patch usb-fix-slab-out-of-bounds-write-in-usb_get_bos_descriptor.patch usb-sisusbvga-fix-oops-in-error-path-of-sisusb_probe.patch usb-add-lpm-quirk-for-surface-dock-gige-adapter.patch usb-rio500-refuse-more-than-one-device-at-a-time.patch usb-rio500-fix-memory-leak-in-close-after-disconnect.patch media-usb-siano-fix-general-protection-fault-in-smsusb.patch media-usb-siano-fix-false-positive-uninitialized-variable-warning.patch media-smsusb-better-handle-optional-alignment.patch brcmfmac-fix-null-pointer-derefence-during-usb-disconnect.patch scsi-zfcp-fix-missing-zfcp_port-reference-put-on-ebusy-from-port_remove.patch scsi-zfcp-fix-to-prevent-port_remove-with-pure-auto-scan-luns-only-sdevs.patch tracing-avoid-memory-leak-in-predicate_parse.patch btrfs-fix-wrong-ctime-and-mtime-of-a-directory-after-log-replay.patch btrfs-fix-race-updating-log-root-item-during-fsync.patch btrfs-fix-fsync-not-persisting-changed-attributes-of-a-directory.patch btrfs-correct-zstd-workspace-manager-lock-to-use-spin_lock_bh.patch btrfs-qgroup-check-bg-while-resuming-relocation-to-avoid-null-pointer-dereference.patch btrfs-incremental-send-fix-file-corruption-when-no-holes-feature-is-enabled.patch btrfs-reloc-also-queue-orphan-reloc-tree-for-cleanup-to-avoid-bug_on.patch iio-dac-ds4422-ds4424-fix-chip-verification.patch iio-adc-ads124-avoid-buffer-overflow.patch iio-adc-modify-npcm-adc-read-reference-voltage.patch iio-adc-ti-ads8688-fix-timestamp-is-not-updated-in-buffer.patch s390-crypto-fix-gcm-aes-s390-selftest-failures.patch s390-crypto-fix-possible-sleep-during-spinlock-aquired.patch kvm-ppc-book3s-hv-xive-do-not-clear-irq-data-of-passthrough-interrupts.patch kvm-ppc-book3s-hv-fix-lockdep-warning-when-entering-guest-on-power9.patch kvm-ppc-book3s-hv-restore-sprg3-in-kvmhv_p9_guest_entry.patch powerpc-perf-fix-mmcra-corruption-by-bhrb_filter.patch powerpc-kexec-fix-loading-of-kernel-initramfs-with-kexec_file_load.patch alsa-line6-assure-canceling-delayed-work-at-disconnection.patch alsa-hda-realtek-set-default-power-save-node-to-0.patch alsa-hda-realtek-improve-the-headset-mic-for-acer-aspire-laptops.patch kvm-s390-do-not-report-unusabled-ids-via-kvm_cap_max_vcpu_id.patch Compile testing --------------- We compiled the kernel for 4 architectures: aarch64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_5.1-aa… kernel build: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_5.1-aa… ppc64le: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_5.1-pp… kernel build: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_5.1-pp… s390x: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_5.1-s390… kernel build: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_5.1-s390… x86_64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_5.1-x86… kernel build: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_5.1-x86… Hardware testing ---------------- We booted each kernel and ran the following tests: aarch64: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. ppc64le: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. s390x: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. x86_64: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. Test source: 💚 Pull requests are welcome for new tests or improvements to existing tests!

5 years, 6 months

1
0
0 0

stable-rc/linux-4.19.y boot: 126 boots: 0 failed, 116 passed with 10 offline (v4.19.48)

by kernelci.org bot

stable-rc/linux-4.19.y boot: 126 boots: 0 failed, 116 passed with 10 offline (v4.19.48) Full Boot Summary: https://kernelci.org/boot/all/job/stable-rc/branch/linux-4.19.y/kernel/v4.1… Full Build Summary: https://kernelci.org/build/stable-rc/branch/linux-4.19.y/kernel/v4.19.48/ Tree: stable-rc Branch: linux-4.19.y Git Describe: v4.19.48 Git Commit: e109a984cf380b4b80418b7477c970bfeb428325 Git URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git Tested: 68 unique boards, 23 SoC families, 14 builds out of 206 Offline Platforms: arm: bcm2835_defconfig: gcc-8 bcm2835-rpi-b: 1 offline lab sama5_defconfig: gcc-8 at91-sama5d4_xplained: 1 offline lab multi_v7_defconfig: gcc-8 alpine-db: 1 offline lab at91-sama5d4_xplained: 1 offline lab socfpga_cyclone5_de0_sockit: 1 offline lab sun5i-r8-chip: 1 offline lab sunxi_defconfig: gcc-8 sun5i-r8-chip: 1 offline lab arm64: defconfig: gcc-8 apq8016-sbc: 1 offline lab juno-r2: 1 offline lab mt7622-rfb1: 1 offline lab --- For more info write to <info(a)kernelci.org>

5 years, 6 months

1
0
0 0

✅ PASS: Stable queue: queue-4.19

by CKI Project

Hello, We ran automated tests on a patchset that was proposed for merging into this kernel tree. The patches were applied to: Kernel repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: e109a984cf38 - Linux 4.19.48 The results of these automated tests are provided below. Overall result: PASSED Merge: OK Compile: OK Tests: OK We hope that these logs can help you find the problem quickly. For the full detail on our testing procedures, please scroll to the bottom of this message. Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________ Merge testing ------------- We cloned this repository and checked out the following commit: Repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: e109a984cf38 - Linux 4.19.48 We then merged the patchset with `git am`: sparc64-fix-regression-in-non-hypervisor-tlb-flush-xcall.patch include-linux-bitops.h-sanitize-rotate-primitives.patch xhci-update-bounce-buffer-with-correct-sg-num.patch xhci-use-zu-for-printing-size_t-type.patch xhci-convert-xhci_handshake-to-use-readl_poll_timeout_atomic.patch usb-xhci-avoid-null-pointer-deref-when-bos-field-is-null.patch usbip-usbip_host-fix-bug-sleeping-function-called-from-invalid-context.patch usbip-usbip_host-fix-stub_dev-lock-context-imbalance-regression.patch usb-fix-slab-out-of-bounds-write-in-usb_get_bos_descriptor.patch usb-sisusbvga-fix-oops-in-error-path-of-sisusb_probe.patch usb-add-lpm-quirk-for-surface-dock-gige-adapter.patch usb-rio500-refuse-more-than-one-device-at-a-time.patch usb-rio500-fix-memory-leak-in-close-after-disconnect.patch media-usb-siano-fix-general-protection-fault-in-smsusb.patch media-usb-siano-fix-false-positive-uninitialized-variable-warning.patch media-smsusb-better-handle-optional-alignment.patch brcmfmac-fix-null-pointer-derefence-during-usb-disconnect.patch scsi-zfcp-fix-missing-zfcp_port-reference-put-on-ebusy-from-port_remove.patch scsi-zfcp-fix-to-prevent-port_remove-with-pure-auto-scan-luns-only-sdevs.patch tracing-avoid-memory-leak-in-predicate_parse.patch btrfs-fix-wrong-ctime-and-mtime-of-a-directory-after-log-replay.patch btrfs-fix-race-updating-log-root-item-during-fsync.patch btrfs-fix-fsync-not-persisting-changed-attributes-of-a-directory.patch btrfs-incremental-send-fix-file-corruption-when-no-holes-feature-is-enabled.patch iio-dac-ds4422-ds4424-fix-chip-verification.patch iio-adc-ti-ads8688-fix-timestamp-is-not-updated-in-buffer.patch s390-crypto-fix-gcm-aes-s390-selftest-failures.patch s390-crypto-fix-possible-sleep-during-spinlock-aquired.patch kvm-ppc-book3s-hv-xive-do-not-clear-irq-data-of-passthrough-interrupts.patch powerpc-perf-fix-mmcra-corruption-by-bhrb_filter.patch alsa-line6-assure-canceling-delayed-work-at-disconnection.patch alsa-hda-realtek-set-default-power-save-node-to-0.patch alsa-hda-realtek-improve-the-headset-mic-for-acer-aspire-laptops.patch kvm-s390-do-not-report-unusabled-ids-via-kvm_cap_max_vcpu_id.patch Compile testing --------------- We compiled the kernel for 4 architectures: aarch64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_4.19-a… kernel build: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_4.19-a… ppc64le: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_4.19-p… kernel build: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_4.19-p… s390x: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_4.19-s39… kernel build: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_4.19-s39… x86_64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_4.19-x8… kernel build: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_4.19-x8… Hardware testing ---------------- We booted each kernel and ran the following tests: aarch64: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. ppc64le: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. s390x: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. x86_64: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. Test source: 💚 Pull requests are welcome for new tests or improvements to existing tests!

5 years, 6 months

1
0
0 0

FAILED: patch "[PATCH] ima: show rules with IMA_INMASK correctly" failed to apply to 4.9-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.9-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From 8cdc23a3d9ec0944000ad43bad588e36afdc38cd Mon Sep 17 00:00:00 2001 From: Roberto Sassu <roberto.sassu(a)huawei.com> Date: Wed, 29 May 2019 15:30:35 +0200 Subject: [PATCH] ima: show rules with IMA_INMASK correctly Show the '^' character when a policy rule has flag IMA_INMASK. Fixes: 80eae209d63ac ("IMA: allow reading back the current IMA policy") Signed-off-by: Roberto Sassu <roberto.sassu(a)huawei.com> Cc: stable(a)vger.kernel.org Signed-off-by: Mimi Zohar <zohar(a)linux.ibm.com> diff --git a/security/integrity/ima/ima_policy.c b/security/integrity/ima/ima_policy.c index 0f6fe53cef09..1cc822a59054 100644 --- a/security/integrity/ima/ima_policy.c +++ b/security/integrity/ima/ima_policy.c @@ -1147,10 +1147,10 @@ enum { }; static const char *const mask_tokens[] = { - "MAY_EXEC", - "MAY_WRITE", - "MAY_READ", - "MAY_APPEND" + "^MAY_EXEC", + "^MAY_WRITE", + "^MAY_READ", + "^MAY_APPEND" }; #define __ima_hook_stringify(str) (#str), @@ -1210,6 +1210,7 @@ int ima_policy_show(struct seq_file *m, void *v) struct ima_rule_entry *entry = v; int i; char tbuf[64] = {0,}; + int offset = 0; rcu_read_lock(); @@ -1233,15 +1234,17 @@ int ima_policy_show(struct seq_file *m, void *v) if (entry->flags & IMA_FUNC) policy_func_show(m, entry->func); - if (entry->flags & IMA_MASK) { + if ((entry->flags & IMA_MASK) || (entry->flags & IMA_INMASK)) { + if (entry->flags & IMA_MASK) + offset = 1; if (entry->mask & MAY_EXEC) - seq_printf(m, pt(Opt_mask), mt(mask_exec)); + seq_printf(m, pt(Opt_mask), mt(mask_exec) + offset); if (entry->mask & MAY_WRITE) - seq_printf(m, pt(Opt_mask), mt(mask_write)); + seq_printf(m, pt(Opt_mask), mt(mask_write) + offset); if (entry->mask & MAY_READ) - seq_printf(m, pt(Opt_mask), mt(mask_read)); + seq_printf(m, pt(Opt_mask), mt(mask_read) + offset); if (entry->mask & MAY_APPEND) - seq_printf(m, pt(Opt_mask), mt(mask_append)); + seq_printf(m, pt(Opt_mask), mt(mask_append) + offset); seq_puts(m, " "); }

5 years, 6 months

1
0
0 0

✅ PASS: Stable queue: queue-4.19

by CKI Project

Hello, We ran automated tests on a patchset that was proposed for merging into this kernel tree. The patches were applied to: Kernel repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: e109a984cf38 - Linux 4.19.48 The results of these automated tests are provided below. Overall result: PASSED Merge: OK Compile: OK Tests: OK We hope that these logs can help you find the problem quickly. For the full detail on our testing procedures, please scroll to the bottom of this message. Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________ Merge testing ------------- We cloned this repository and checked out the following commit: Repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: e109a984cf38 - Linux 4.19.48 We then merged the patchset with `git am`: sparc64-fix-regression-in-non-hypervisor-tlb-flush-xcall.patch include-linux-bitops.h-sanitize-rotate-primitives.patch xhci-update-bounce-buffer-with-correct-sg-num.patch xhci-use-zu-for-printing-size_t-type.patch xhci-convert-xhci_handshake-to-use-readl_poll_timeout_atomic.patch usb-xhci-avoid-null-pointer-deref-when-bos-field-is-null.patch usbip-usbip_host-fix-bug-sleeping-function-called-from-invalid-context.patch usbip-usbip_host-fix-stub_dev-lock-context-imbalance-regression.patch usb-fix-slab-out-of-bounds-write-in-usb_get_bos_descriptor.patch usb-sisusbvga-fix-oops-in-error-path-of-sisusb_probe.patch usb-add-lpm-quirk-for-surface-dock-gige-adapter.patch usb-rio500-refuse-more-than-one-device-at-a-time.patch usb-rio500-fix-memory-leak-in-close-after-disconnect.patch media-usb-siano-fix-general-protection-fault-in-smsusb.patch media-usb-siano-fix-false-positive-uninitialized-variable-warning.patch media-smsusb-better-handle-optional-alignment.patch brcmfmac-fix-null-pointer-derefence-during-usb-disconnect.patch scsi-zfcp-fix-missing-zfcp_port-reference-put-on-ebusy-from-port_remove.patch scsi-zfcp-fix-to-prevent-port_remove-with-pure-auto-scan-luns-only-sdevs.patch tracing-avoid-memory-leak-in-predicate_parse.patch btrfs-fix-wrong-ctime-and-mtime-of-a-directory-after-log-replay.patch btrfs-fix-race-updating-log-root-item-during-fsync.patch btrfs-fix-fsync-not-persisting-changed-attributes-of-a-directory.patch btrfs-incremental-send-fix-file-corruption-when-no-holes-feature-is-enabled.patch Compile testing --------------- We compiled the kernel for 4 architectures: aarch64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_4.19-a… kernel build: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_4.19-a… ppc64le: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_4.19-p… kernel build: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_4.19-p… s390x: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_4.19-s39… kernel build: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_4.19-s39… x86_64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_4.19-x8… kernel build: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_4.19-x8… Hardware testing ---------------- We booted each kernel and ran the following tests: aarch64: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. ppc64le: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. s390x: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. x86_64: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. Test source: 💚 Pull requests are welcome for new tests or improvements to existing tests!

5 years, 6 months

1
0
0 0

✅ PASS: Stable queue: queue-5.1

by CKI Project

Hello, We ran automated tests on a patchset that was proposed for merging into this kernel tree. The patches were applied to: Kernel repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: 2f7d9d47575e - Linux 5.1.7 The results of these automated tests are provided below. Overall result: PASSED Merge: OK Compile: OK Tests: OK We hope that these logs can help you find the problem quickly. For the full detail on our testing procedures, please scroll to the bottom of this message. Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________ Merge testing ------------- We cloned this repository and checked out the following commit: Repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: 2f7d9d47575e - Linux 5.1.7 We then merged the patchset with `git am`: sparc64-fix-regression-in-non-hypervisor-tlb-flush-xcall.patch include-linux-bitops.h-sanitize-rotate-primitives.patch xhci-update-bounce-buffer-with-correct-sg-num.patch xhci-use-zu-for-printing-size_t-type.patch xhci-convert-xhci_handshake-to-use-readl_poll_timeout_atomic.patch usb-xhci-avoid-null-pointer-deref-when-bos-field-is-null.patch usbip-usbip_host-fix-bug-sleeping-function-called-from-invalid-context.patch usbip-usbip_host-fix-stub_dev-lock-context-imbalance-regression.patch usb-fix-slab-out-of-bounds-write-in-usb_get_bos_descriptor.patch usb-sisusbvga-fix-oops-in-error-path-of-sisusb_probe.patch usb-add-lpm-quirk-for-surface-dock-gige-adapter.patch usb-rio500-refuse-more-than-one-device-at-a-time.patch usb-rio500-fix-memory-leak-in-close-after-disconnect.patch media-usb-siano-fix-general-protection-fault-in-smsusb.patch media-usb-siano-fix-false-positive-uninitialized-variable-warning.patch media-smsusb-better-handle-optional-alignment.patch brcmfmac-fix-null-pointer-derefence-during-usb-disconnect.patch scsi-zfcp-fix-missing-zfcp_port-reference-put-on-ebusy-from-port_remove.patch scsi-zfcp-fix-to-prevent-port_remove-with-pure-auto-scan-luns-only-sdevs.patch tracing-avoid-memory-leak-in-predicate_parse.patch btrfs-fix-wrong-ctime-and-mtime-of-a-directory-after-log-replay.patch btrfs-fix-race-updating-log-root-item-during-fsync.patch btrfs-fix-fsync-not-persisting-changed-attributes-of-a-directory.patch btrfs-correct-zstd-workspace-manager-lock-to-use-spin_lock_bh.patch btrfs-qgroup-check-bg-while-resuming-relocation-to-avoid-null-pointer-dereference.patch btrfs-incremental-send-fix-file-corruption-when-no-holes-feature-is-enabled.patch btrfs-reloc-also-queue-orphan-reloc-tree-for-cleanup-to-avoid-bug_on.patch iio-dac-ds4422-ds4424-fix-chip-verification.patch iio-adc-ads124-avoid-buffer-overflow.patch iio-adc-modify-npcm-adc-read-reference-voltage.patch iio-adc-ti-ads8688-fix-timestamp-is-not-updated-in-buffer.patch s390-crypto-fix-gcm-aes-s390-selftest-failures.patch s390-crypto-fix-possible-sleep-during-spinlock-aquired.patch kvm-ppc-book3s-hv-xive-do-not-clear-irq-data-of-passthrough-interrupts.patch kvm-ppc-book3s-hv-fix-lockdep-warning-when-entering-guest-on-power9.patch kvm-ppc-book3s-hv-restore-sprg3-in-kvmhv_p9_guest_entry.patch powerpc-perf-fix-mmcra-corruption-by-bhrb_filter.patch powerpc-kexec-fix-loading-of-kernel-initramfs-with-kexec_file_load.patch alsa-line6-assure-canceling-delayed-work-at-disconnection.patch alsa-hda-realtek-set-default-power-save-node-to-0.patch alsa-hda-realtek-improve-the-headset-mic-for-acer-aspire-laptops.patch Compile testing --------------- We compiled the kernel for 4 architectures: aarch64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_5.1-aa… kernel build: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_5.1-aa… ppc64le: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_5.1-pp… kernel build: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_5.1-pp… s390x: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_5.1-s390… kernel build: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_5.1-s390… x86_64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_5.1-x86… kernel build: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_5.1-x86… Hardware testing ---------------- We booted each kernel and ran the following tests: aarch64: ⚡ Internal infrastructure issues prevented one or more tests from running on this architecture. This is not the fault of the kernel that was tested. ppc64le: Host 1: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] Host 2: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ AMTU (Abstract Machine Test Utility) [4] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] ✅ Usex - version 1.9-29 [9] s390x: Host 1: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] 🚧 ✅ stress: stress-ng [10] Host 2: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] x86_64: Host 1: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] Host 2: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ AMTU (Abstract Machine Test Utility) [4] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] ✅ Usex - version 1.9-29 [9] 🚧 ✅ stress: stress-ng [10] Test source: 💚 Pull requests are welcome for new tests or improvements to existing tests! [0]: https://github.com/CKI-project/tests-beaker/archive/master.zip#distribution… [1]: https://github.com/CKI-project/tests-beaker/archive/master.zip#/packages/se… [2]: https://github.com/CKI-project/tests-beaker/archive/master.zip#distribution… [3]: https://github.com/CKI-project/tests-beaker/archive/master.zip#filesystems/… [4]: https://github.com/CKI-project/tests-beaker/archive/master.zip#misc/amtu [5]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/aud… [6]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/htt… [7]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/iot… [8]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/tun… [9]: https://github.com/CKI-project/tests-beaker/archive/master.zip#standards/us… [10]: https://github.com/CKI-project/tests-beaker/archive/master.zip#stress/stres… Waived tests (marked with 🚧) ----------------------------- This test run included waived tests. Such tests are executed but their results are not taken into account. Tests are waived when their results are not reliable enough, e.g. when they're just introduced or are being fixed.

5 years, 6 months

1
0
0 0

[PATCH BACKPORT 4.14 1/2] Compiler Attributes: add support for __copy (gcc >= 9)

by Stefan Agner

From: Miguel Ojeda <miguel.ojeda.sandonis(a)gmail.com> [ Upstream commit c0d9782f5b6d7157635ae2fd782a4b27d55a6013 >From the GCC manual: copy copy(function) The copy attribute applies the set of attributes with which function has been declared to the declaration of the function to which the attribute is applied. The attribute is designed for libraries that define aliases or function resolvers that are expected to specify the same set of attributes as their targets. The copy attribute can be used with functions, variables, or types. However, the kind of symbol to which the attribute is applied (either function or variable) must match the kind of symbol to which the argument refers. The copy attribute copies only syntactic and semantic attributes but not attributes that affect a symbol’s linkage or visibility such as alias, visibility, or weak. The deprecated attribute is also not copied. https://gcc.gnu.org/onlinedocs/gcc/Common-Function-Attributes.html The upcoming GCC 9 release extends the -Wmissing-attributes warnings (enabled by -Wall) to C and aliases: it warns when particular function attributes are missing in the aliases but not in their target, e.g.: void __cold f(void) {} void __alias("f") g(void); diagnoses: warning: 'g' specifies less restrictive attribute than its target 'f': 'cold' [-Wmissing-attributes] Using __copy(f) we can copy the __cold attribute from f to g: void __cold f(void) {} void __copy(f) __alias("f") g(void); This attribute is most useful to deal with situations where an alias is declared but we don't know the exact attributes the target has. For instance, in the kernel, the widely used module_init/exit macros define the init/cleanup_module aliases, but those cannot be marked always as __init/__exit since some modules do not have their functions marked as such. Cc: <stable(a)vger.kernel.org> # 4.14+ Suggested-by: Martin Sebor <msebor(a)gcc.gnu.org> Reviewed-by: Nick Desaulniers <ndesaulniers(a)google.com> Signed-off-by: Miguel Ojeda <miguel.ojeda.sandonis(a)gmail.com> Signed-off-by: Stefan Agner <stefan(a)agner.ch> --- include/linux/compiler-gcc.h | 4 ++++ include/linux/compiler_types.h | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/include/linux/compiler-gcc.h b/include/linux/compiler-gcc.h index 4816355b9875..6d7ead22c1b4 100644 --- a/include/linux/compiler-gcc.h +++ b/include/linux/compiler-gcc.h @@ -343,6 +343,10 @@ #define __designated_init __attribute__((designated_init)) #endif +#if GCC_VERSION >= 90100 +#define __copy(symbol) __attribute__((__copy__(symbol))) +#endif + #endif /* gcc version >= 40000 specific checks */ #if !defined(__noclone) diff --git a/include/linux/compiler_types.h b/include/linux/compiler_types.h index 4be464a07612..20112bb1a8f9 100644 --- a/include/linux/compiler_types.h +++ b/include/linux/compiler_types.h @@ -230,6 +230,10 @@ struct ftrace_likely_data { # define __latent_entropy #endif +#ifndef __copy +# define __copy +#endif + #ifndef __randomize_layout # define __randomize_layout __designated_init #endif -- 2.21.0

5 years, 6 months

2
3
0 0

FAILED: patch "[PATCH] signal/arm64: Use force_sig not force_sig_fault for SIGKILL" failed to apply to 4.19-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.19-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From d76cac67db40c172791ce07948367b96a758e45b Mon Sep 17 00:00:00 2001 From: "Eric W. Biederman" <ebiederm(a)xmission.com> Date: Thu, 23 May 2019 11:11:19 -0500 Subject: [PATCH] signal/arm64: Use force_sig not force_sig_fault for SIGKILL I don't think this is userspace visible but SIGKILL does not have any si_codes that use the fault member of the siginfo union. Correct this the simple way and call force_sig instead of force_sig_fault when the signal is SIGKILL. The two know places where synchronous SIGKILL are generated are do_bad_area and fpsimd_save. The call paths to force_sig_fault are: do_bad_area arm64_force_sig_fault force_sig_fault force_signal_inject arm64_notify_die arm64_force_sig_fault force_sig_fault Which means correcting this in arm64_force_sig_fault is enough to ensure the arm64 code is not misusing the generic code, which could lead to maintenance problems later. Cc: stable(a)vger.kernel.org Cc: Dave Martin <Dave.Martin(a)arm.com> Cc: James Morse <james.morse(a)arm.com> Cc: Will Deacon <will.deacon(a)arm.com> Fixes: af40ff687bc9 ("arm64: signal: Ensure si_code is valid for all fault signals") Signed-off-by: "Eric W. Biederman" <ebiederm(a)xmission.com> Signed-off-by: Will Deacon <will.deacon(a)arm.com> diff --git a/arch/arm64/kernel/traps.c b/arch/arm64/kernel/traps.c index e6be1a6efc0a..177c0f6ebabf 100644 --- a/arch/arm64/kernel/traps.c +++ b/arch/arm64/kernel/traps.c @@ -252,7 +252,10 @@ void arm64_force_sig_fault(int signo, int code, void __user *addr, const char *str) { arm64_show_signal(signo, str); - force_sig_fault(signo, code, addr, current); + if (signo == SIGKILL) + force_sig(SIGKILL, current); + else + force_sig_fault(signo, code, addr, current); } void arm64_force_sig_mceerr(int code, void __user *addr, short lsb,

5 years, 6 months

1
0
0 0

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror June 2019