diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2026-10-30 13:38:02 -1000 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2026-10-30 13:38:02 -1000 |
| commit | 69eac8481741b1474eac7c459768c94bb94430e1 (patch) | |
| tree | dd0ac7ac8967ffa3ceb8ab3ad1811f24e265fd8f /scripts/basic | |
| parent | a9547379cb381e2a036e3261a6becc17973ac470 (diff) | |
| parent | c349b233d6ab0fc3517401a1e2d36f5f90eb8c9b (diff) | |
| download | linux-69eac8481741b1474eac7c459768c94bb94430e1.tar.gz linux-69eac8481741b1474eac7c459768c94bb94430e1.zip | |
Merge tag 'fsverity-for-linus' of git://git.kernel.org/pub/scm/fs/fsverity/linux
Pull fsverity fixes from Eric Biggers:
"Fixes for several bugs found by LLMs:
- Fix bypass of IPE's fsverity support, and a use-after-free in
certain cases, when FS_IOC_ENABLE_VERITY fails when almost done
- Fix FS_IOC_MEASURE_VERITY and FS_IOC_READ_VERITY_METADATA to no
longer bypass Landlock and AppArmor's read permission checks
- Be robust against the filesystem returning different values for a
file's verity descriptor length in two successive queries"
* tag 'fsverity-for-linus' of git://git.kernel.org/pub/scm/fs/fsverity/linux:
fsverity: Set S_VERITY only after rollback is no longer possible
fsverity: Tell LSMs about signature only after verity is enabled
fsverity: Be more careful with return value of ->get_verity_descriptor()
fsverity: Explicitly require FMODE_READ to retrieve hashes
Diffstat (limited to 'scripts/basic')
0 files changed, 0 insertions, 0 deletions