Re: [PATCH v2] selinux: ignore unknown extended permissions

On Dec 4, 2024 "=?UTF-8?q?Thi=C3=A9baud=20Weksteen?=" tweek@google.com wrote:

When evaluating extended permissions, ignore unknown permissions instead of calling BUG(). This commit ensures that future permissions can be added without interfering with older kernels.

Fixes: fa1aa143ac4a ("selinux: extended permissions for ioctls") Cc: stable@vger.kernel.org Signed-off-by: Thiébaud Weksteen tweek@google.com

---

v2: Add pr_warn_once, remove other BUG() call for key.specified

security/selinux/ss/services.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-)

Merged into selinux/stable-6.13, thanks!

-- paul-moore.com