This is an automated email from the git hooks/post-receive script.
unknown user pushed a change to branch master in repository linux.
from 7004a2e46d16 Merge tag 'linux_kselftest-nolibc-6.14-rc1' of git://git.k [...] new 5f56d41a21b6 keys: drop shadowing dead prototype new e8d9fab39d1f KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y new 9cb2bf599b2c Merge tag 'keys-next-6.14-rc1' of git://git.kernel.org/pub [...] new 0a499a7e9819 lib/crc32: drop leading underscores from __crc32c_le_base new d36cebe03c3a lib/crc32: improve support for arch-specific overrides new b5ae12e0ee09 lib/crc32: expose whether the lib is really optimized at runtime new 780acb2543ea crypto: crc32 - don't unnecessarily register arch algorithms new 1e1b6dbc3d9c arm/crc32: expose CRC32 functions through lib new 72f51a4f4b07 loongarch/crc32: expose CRC32 functions through lib new 289c270eab5e mips/crc32: expose CRC32 functions through lib new 372ff60ac4dd powerpc/crc32: expose CRC32 functions through lib new 008071917dfc s390/crc32: expose CRC32 functions through lib new 0f60a8ace577 sparc/crc32: expose CRC32 functions through lib new 64e3586c0b61 x86/crc32: update prototype for crc_pcl() new 1e6b72e60a5a x86/crc32: update prototype for crc32_pclmul_le_16() new 55d1ecceb8d6 x86/crc32: expose CRC32 functions through lib new cc354fa7f016 bcachefs: Explicitly select CRYPTO from BCACHEFS_FS new 38a9a5121c3b lib/crc32: make crc32c() go directly to lib new f2b4fa19647e ext4: switch to using the crc32c library new dd348f054b24 jbd2: switch to using the crc32c library new 3ca4bec40ee2 f2fs: switch to using the crc32 library new 31e4cdde4d8b scsi: target: iscsi: switch to using the crc32c library new be3c45b070cb lib/crc-t10dif: stop wrapping the crypto API new 0961c3bcefa6 lib/crc-t10dif: add support for arch overrides new 21dda37f3f8b crypto: crct10dif - expose arch-optimized lib function new ed4bc981d52b x86/crc-t10dif: expose CRC-T10DIF function through lib new 1684e8293605 arm/crc-t10dif: expose CRC-T10DIF function through lib new 2051da858534 arm64/crc-t10dif: expose CRC-T10DIF function through lib new 7439cfed1c41 powerpc/crc-t10dif: expose CRC-T10DIF function through lib new e47d9b1a76ed lib/crc_kunit.c: add KUnit test suite for CRC library functions new c14e85360969 lib/crc16_kunit: delete obsolete crc16_kunit.c new 87fe0a131001 lib/crc32test: delete obsolete crc32test.c new db1fda2d4cd4 powerpc/crc: delete obsolete crc-vpmsum_test.c new 72914faebaab MAINTAINERS: add entry for CRC library new 37b33c68b000 Merge tag 'crc-for-linus' of git://git.kernel.org/pub/scm/ [...] new b665ee5f08df selftests/landlock: Remove unused macros in ptrace_test.c new 078bf9438a31 samples/landlock: Fix possible NULL dereference in parse_path() new 49440290a093 landlock: Handle weird files new 25ccc75f5de6 landlock: Constify get_mode_access() new d32f79a59ae1 landlock: Use scoped guards for ruleset new 16a6f4d3b558 landlock: Use scoped guards for ruleset in landlock_add_rule() new 0e4db4f843c2 selftests/landlock: Fix build with non-default pthread linking new 924f4403d869 landlock: Factor out check_access_path() new 622e2f595476 landlock: Move access types new d6c7cf84a24f landlock: Simplify initially denied access rights new 058518c20920 landlock: Align partial refer access checks with final ones new 12264f721f64 selftests/landlock: Add test to check partial access in a [...] new d617f0d72d80 landlock: Optimize file path walks and prepare for audit support new 2107c35128ad selftests/landlock: Fix error message new 5147779d5e1b selftests/landlock: Add wrappers.h new 2a794ee61361 selftests/landlock: Add layout1.umount_sandboxer tests new de5817bbfb56 Merge tag 'landlock-6.14-rc1' of git://git.kernel.org/pub/ [...] new 3df7546fc03b tomoyo: don't emit warning in tomoyo_write_control() new 0476fd4ff452 tomoyo: use realpath if symlink's pathname refers to procfs new 08ae2487b202 tomoyo: automatically use patterns for several situations [...] new ad2aec7c963e Merge tag 'tomoyo-pr-20250123' of git://git.code.sf.net/p/ [...] new c38904ebb74b tracing: Add task_prctl_unknown tracepoint new e3f6a42272e0 tracing: Remove pid in task_rename tracing output new 62e9c1e8ecee stackleak: Use str_enabled_disabled() helper in stack_eras [...] new a9a5e0bdc5a7 hardening: Document INIT_STACK_ALL_PATTERN behavior with GCC new 5ab889facc68 Merge tag 'hardening-v6.14-rc1' of git://git.kernel.org/pu [...] new a5874fde3c08 exec: Add a new AT_EXECVE_CHECK flag to execveat(2) new a0623b2a1d59 security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE [...] new b083cc815376 selftests/exec: Add 32 tests for AT_EXECVE_CHECK and exec [...] new 0e7f90f34cf7 selftests/landlock: Add tests for execveat + AT_EXECVE_CHECK new faf2d88e5567 samples/check-exec: Add set-exec new 3e707b07f582 selftests: ktap_helpers: Fix uninitialized variable new 2a69962be4a7 samples/check-exec: Add an enlighten "inc" interpreter and [...] new 95b3cdafd7cb ima: instantiate the bprm_creds_for_exec() hook new 21266b8df522 Merge tag 'AT_EXECVE_CHECK-v6.14-rc1' of git://git.kernel. [...]
The 70 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference.
Summary of changes: Documentation/userspace-api/check_exec.rst | 144 ++++ Documentation/userspace-api/index.rst | 1 + MAINTAINERS | 11 + arch/arm/Kconfig | 2 + arch/arm/configs/milbeaut_m10v_defconfig | 1 - arch/arm/configs/multi_v7_defconfig | 1 - arch/arm/crypto/Kconfig | 25 - arch/arm/crypto/Makefile | 4 - arch/arm/crypto/crc32-ce-glue.c | 247 ------ arch/arm/crypto/crct10dif-ce-glue.c | 124 --- arch/arm/lib/Makefile | 6 + .../crct10dif-ce-core.S => lib/crc-t10dif-core.S} | 0 arch/arm/lib/crc-t10dif-glue.c | 80 ++ .../{crypto/crc32-ce-core.S => lib/crc32-core.S} | 5 +- arch/arm/lib/crc32-glue.c | 123 +++ arch/arm64/Kconfig | 2 + arch/arm64/configs/defconfig | 1 - arch/arm64/crypto/Kconfig | 10 - arch/arm64/crypto/Makefile | 3 - arch/arm64/crypto/crct10dif-ce-glue.c | 132 ---- arch/arm64/lib/Makefile | 6 +- .../crct10dif-ce-core.S => lib/crc-t10dif-core.S} | 0 arch/arm64/lib/crc-t10dif-glue.c | 81 ++ arch/arm64/lib/crc32-glue.c | 25 +- arch/loongarch/Kconfig | 1 + arch/loongarch/configs/loongson3_defconfig | 1 - arch/loongarch/crypto/Kconfig | 9 - arch/loongarch/crypto/Makefile | 2 - arch/loongarch/crypto/crc32-loongarch.c | 300 -------- arch/loongarch/lib/Makefile | 2 + arch/loongarch/lib/crc32-loongarch.c | 135 ++++ arch/m68k/configs/amiga_defconfig | 1 - arch/m68k/configs/apollo_defconfig | 1 - arch/m68k/configs/atari_defconfig | 1 - arch/m68k/configs/bvme6000_defconfig | 1 - arch/m68k/configs/hp300_defconfig | 1 - arch/m68k/configs/mac_defconfig | 1 - arch/m68k/configs/multi_defconfig | 1 - arch/m68k/configs/mvme147_defconfig | 1 - arch/m68k/configs/mvme16x_defconfig | 1 - arch/m68k/configs/q40_defconfig | 1 - arch/m68k/configs/sun3_defconfig | 1 - arch/m68k/configs/sun3x_defconfig | 1 - arch/mips/Kconfig | 5 +- arch/mips/configs/eyeq5_defconfig | 1 - arch/mips/configs/eyeq6_defconfig | 1 - arch/mips/configs/generic/32r6.config | 2 - arch/mips/configs/generic/64r6.config | 1 - arch/mips/crypto/Kconfig | 9 - arch/mips/crypto/Makefile | 2 - arch/mips/crypto/crc32-mips.c | 354 --------- arch/mips/lib/Makefile | 2 + arch/mips/lib/crc32-mips.c | 192 +++++ arch/powerpc/Kconfig | 2 + arch/powerpc/configs/powernv_defconfig | 2 - arch/powerpc/configs/ppc64_defconfig | 3 - arch/powerpc/crypto/Kconfig | 33 - arch/powerpc/crypto/Makefile | 5 - arch/powerpc/crypto/crc-vpmsum_test.c | 133 ---- arch/powerpc/crypto/crc32c-vpmsum_glue.c | 173 ----- arch/powerpc/lib/Makefile | 6 + .../crc-t10dif-glue.c} | 69 +- arch/powerpc/lib/crc32-glue.c | 92 +++ arch/powerpc/{crypto => lib}/crc32-vpmsum_core.S | 0 arch/powerpc/{crypto => lib}/crc32c-vpmsum_asm.S | 0 .../powerpc/{crypto => lib}/crct10dif-vpmsum_asm.S | 0 arch/riscv/Kconfig | 1 + arch/riscv/lib/Makefile | 3 +- arch/riscv/lib/{crc32.c => crc32-riscv.c} | 25 +- arch/s390/Kconfig | 1 + arch/s390/configs/debug_defconfig | 2 - arch/s390/configs/defconfig | 1 - arch/s390/crypto/Kconfig | 12 - arch/s390/crypto/Makefile | 2 - arch/s390/crypto/crc32-vx.c | 306 -------- arch/s390/lib/Makefile | 3 + arch/s390/lib/crc32-glue.c | 92 +++ arch/s390/{crypto => lib}/crc32-vx.h | 0 arch/s390/{crypto => lib}/crc32be-vx.c | 0 arch/s390/{crypto => lib}/crc32le-vx.c | 0 arch/sparc/Kconfig | 1 + arch/sparc/crypto/Kconfig | 10 - arch/sparc/crypto/Makefile | 4 - arch/sparc/crypto/crc32c_glue.c | 184 ----- arch/sparc/lib/Makefile | 2 + arch/sparc/lib/crc32_glue.c | 93 +++ arch/sparc/{crypto => lib}/crc32c_asm.S | 2 +- arch/x86/Kconfig | 2 + arch/x86/crypto/Kconfig | 32 - arch/x86/crypto/Makefile | 10 - arch/x86/crypto/crc32-pclmul_glue.c | 202 ----- arch/x86/crypto/crc32c-intel_glue.c | 250 ------ arch/x86/crypto/crct10dif-pclmul_glue.c | 143 ---- arch/x86/lib/Makefile | 7 + arch/x86/lib/crc-t10dif-glue.c | 51 ++ arch/x86/lib/crc32-glue.c | 124 +++ .../crc32-pclmul_asm.S => lib/crc32-pclmul.S} | 19 +- .../crc32c-3way.S} | 63 +- arch/x86/{crypto => lib}/crct10dif-pcl-asm_64.S | 0 crypto/Kconfig | 1 + crypto/Makefile | 3 +- crypto/crc32_generic.c | 8 +- crypto/crc32c_generic.c | 12 +- crypto/crct10dif_common.c | 82 -- crypto/crct10dif_generic.c | 82 +- drivers/target/iscsi/Kconfig | 4 +- drivers/target/iscsi/iscsi_target.c | 153 ++-- drivers/target/iscsi/iscsi_target_login.c | 50 -- drivers/target/iscsi/iscsi_target_login.h | 1 - drivers/target/iscsi/iscsi_target_nego.c | 21 +- fs/bcachefs/Kconfig | 1 + fs/exec.c | 20 +- fs/ext4/Kconfig | 3 +- fs/ext4/ext4.h | 25 +- fs/ext4/super.c | 15 - fs/f2fs/Kconfig | 3 +- fs/f2fs/f2fs.h | 20 +- fs/f2fs/super.c | 15 - fs/jbd2/Kconfig | 2 - fs/jbd2/journal.c | 30 +- include/keys/system_keyring.h | 2 +- include/linux/binfmts.h | 7 +- include/linux/crc-t10dif.h | 28 +- include/linux/crc32.h | 50 +- include/linux/crc32c.h | 7 +- include/linux/jbd2.h | 33 +- include/target/iscsi/iscsi_target_core.h | 3 - include/trace/events/task.h | 44 +- include/uapi/linux/audit.h | 1 + include/uapi/linux/fcntl.h | 4 + include/uapi/linux/securebits.h | 24 +- kernel/stackleak.c | 3 +- kernel/sys.c | 3 + lib/Kconfig | 121 ++- lib/Kconfig.debug | 29 +- lib/Makefile | 4 +- lib/crc-t10dif.c | 156 ++-- lib/crc16_kunit.c | 155 ---- lib/crc32.c | 24 +- lib/crc32test.c | 852 --------------------- lib/crc_kunit.c | 435 +++++++++++ lib/libcrc32c.c | 74 -- samples/Kconfig | 9 + samples/Makefile | 1 + samples/check-exec/.gitignore | 2 + samples/check-exec/Makefile | 15 + samples/check-exec/inc.c | 205 +++++ samples/check-exec/run-script-ask.inc | 9 + samples/check-exec/script-ask.inc | 5 + samples/check-exec/script-exec.inc | 4 + samples/check-exec/script-noexec.inc | 4 + samples/check-exec/set-exec.c | 85 ++ samples/landlock/sandboxer.c | 7 + security/Kconfig.hardening | 1 + security/commoncap.c | 29 +- security/integrity/ima/ima_appraise.c | 27 +- security/integrity/ima/ima_main.c | 29 + security/keys/trusted-keys/trusted_dcp.c | 22 +- security/landlock/access.h | 77 ++ security/landlock/fs.c | 114 +-- security/landlock/fs.h | 1 + security/landlock/ruleset.c | 26 +- security/landlock/ruleset.h | 52 +- security/landlock/syscalls.c | 39 +- security/security.c | 10 + security/tomoyo/common.c | 32 +- security/tomoyo/domain.c | 11 +- tools/testing/selftests/arm64/fp/kernel-test.c | 3 +- tools/testing/selftests/exec/.gitignore | 4 + tools/testing/selftests/exec/Makefile | 19 +- tools/testing/selftests/exec/check-exec-tests.sh | 205 +++++ tools/testing/selftests/exec/check-exec.c | 456 +++++++++++ tools/testing/selftests/exec/config | 2 + tools/testing/selftests/exec/false.c | 5 + tools/testing/selftests/kselftest/ktap_helpers.sh | 2 +- tools/testing/selftests/landlock/Makefile | 6 +- tools/testing/selftests/landlock/common.h | 38 +- tools/testing/selftests/landlock/fs_test.c | 178 ++++- tools/testing/selftests/landlock/ptrace_test.c | 2 - .../selftests/landlock/sandbox-and-launch.c | 82 ++ tools/testing/selftests/landlock/wait-pipe.c | 42 + tools/testing/selftests/landlock/wrappers.h | 47 ++ 182 files changed, 3969 insertions(+), 4778 deletions(-) create mode 100644 Documentation/userspace-api/check_exec.rst delete mode 100644 arch/arm/crypto/crc32-ce-glue.c delete mode 100644 arch/arm/crypto/crct10dif-ce-glue.c rename arch/arm/{crypto/crct10dif-ce-core.S => lib/crc-t10dif-core.S} (100%) create mode 100644 arch/arm/lib/crc-t10dif-glue.c rename arch/arm/{crypto/crc32-ce-core.S => lib/crc32-core.S} (98%) create mode 100644 arch/arm/lib/crc32-glue.c delete mode 100644 arch/arm64/crypto/crct10dif-ce-glue.c rename arch/arm64/{crypto/crct10dif-ce-core.S => lib/crc-t10dif-core.S} (100%) create mode 100644 arch/arm64/lib/crc-t10dif-glue.c delete mode 100644 arch/loongarch/crypto/crc32-loongarch.c create mode 100644 arch/loongarch/lib/crc32-loongarch.c delete mode 100644 arch/mips/crypto/crc32-mips.c create mode 100644 arch/mips/lib/crc32-mips.c delete mode 100644 arch/powerpc/crypto/crc-vpmsum_test.c delete mode 100644 arch/powerpc/crypto/crc32c-vpmsum_glue.c rename arch/powerpc/{crypto/crct10dif-vpmsum_glue.c => lib/crc-t10dif-glue.c} (50%) create mode 100644 arch/powerpc/lib/crc32-glue.c rename arch/powerpc/{crypto => lib}/crc32-vpmsum_core.S (100%) rename arch/powerpc/{crypto => lib}/crc32c-vpmsum_asm.S (100%) rename arch/powerpc/{crypto => lib}/crct10dif-vpmsum_asm.S (100%) rename arch/riscv/lib/{crc32.c => crc32-riscv.c} (91%) delete mode 100644 arch/s390/crypto/crc32-vx.c create mode 100644 arch/s390/lib/crc32-glue.c rename arch/s390/{crypto => lib}/crc32-vx.h (100%) rename arch/s390/{crypto => lib}/crc32be-vx.c (100%) rename arch/s390/{crypto => lib}/crc32le-vx.c (100%) delete mode 100644 arch/sparc/crypto/crc32c_glue.c create mode 100644 arch/sparc/lib/crc32_glue.c rename arch/sparc/{crypto => lib}/crc32c_asm.S (92%) delete mode 100644 arch/x86/crypto/crc32-pclmul_glue.c delete mode 100644 arch/x86/crypto/crc32c-intel_glue.c delete mode 100644 arch/x86/crypto/crct10dif-pclmul_glue.c create mode 100644 arch/x86/lib/crc-t10dif-glue.c create mode 100644 arch/x86/lib/crc32-glue.c rename arch/x86/{crypto/crc32-pclmul_asm.S => lib/crc32-pclmul.S} (95%) rename arch/x86/{crypto/crc32c-pcl-intel-asm_64.S => lib/crc32c-3way.S} (92%) rename arch/x86/{crypto => lib}/crct10dif-pcl-asm_64.S (100%) delete mode 100644 crypto/crct10dif_common.c delete mode 100644 lib/crc16_kunit.c delete mode 100644 lib/crc32test.c create mode 100644 lib/crc_kunit.c delete mode 100644 lib/libcrc32c.c create mode 100644 samples/check-exec/.gitignore create mode 100644 samples/check-exec/Makefile create mode 100644 samples/check-exec/inc.c create mode 100755 samples/check-exec/run-script-ask.inc create mode 100755 samples/check-exec/script-ask.inc create mode 100755 samples/check-exec/script-exec.inc create mode 100644 samples/check-exec/script-noexec.inc create mode 100644 samples/check-exec/set-exec.c create mode 100644 security/landlock/access.h create mode 100755 tools/testing/selftests/exec/check-exec-tests.sh create mode 100644 tools/testing/selftests/exec/check-exec.c create mode 100644 tools/testing/selftests/exec/config create mode 100644 tools/testing/selftests/exec/false.c create mode 100644 tools/testing/selftests/landlock/sandbox-and-launch.c create mode 100644 tools/testing/selftests/landlock/wait-pipe.c create mode 100644 tools/testing/selftests/landlock/wrappers.h