- rsbac-commit - rsbac.org

linux-6.12.y 6.12.37 commit 0c96ca373f72 Exclude procfs from CAP fd hiding, it can have misleading owner/mod
by Amon Ott 11 Jul '25

11 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.37 commit 0c96ca373f72001e659259c4a8210edc4863c35c Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jul 10 14:31:24 2025 +0200 Exclude procfs from CAP fd hiding, it can have misleading owner/mode values. rsbac/help/helpers.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-)

1 0

linux-6.12.y 6.12.36 commit 19822af0c5ef Exclude procfs from CAP fd hiding, it can have misleading owner/mod
by Amon Ott 10 Jul '25

10 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.36 commit 19822af0c5eff75e9e74ea6950bf9bed844b7980 Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jul 10 14:31:24 2025 +0200 Exclude procfs from CAP fd hiding, it can have misleading owner/mode values. rsbac/help/helpers.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-)

1 0

linux-6.12.y 6.12.36 commit 3ee2124d328e When debugging CAP hidden FD objects, also show device number.
by Amon Ott 10 Jul '25

10 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.36 commit 3ee2124d328edd2a8ddf7f2beccb1582ff391300 Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jul 10 12:48:49 2025 +0200 When debugging CAP hidden FD objects, also show device number. rsbac/help/helpers.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

linux-6.12.y 6.12.36 commit 8c7da475dd63 Add debug switch rsbac_debug_adf_cap, use it to debug CAP hidden FD
by Amon Ott 10 Jul '25

10 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.36 commit 8c7da475dd63bf3d128eb9a84040858cd030332d Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jul 10 11:31:13 2025 +0200 Add debug switch rsbac_debug_adf_cap, use it to debug CAP hidden FD objects. include/rsbac/debug.h | 8 +++++-- rsbac/help/debug.c | 60 +++++++++++++++++++++++++++++++++++++++++++++++++-- rsbac/help/helpers.c | 7 ++++++ 3 files changed, 71 insertions(+), 4 deletions(-)

1 0

linux-6.12.y 6.12.36 commit 9b1a9528637f With CAP fd hiding, do not hide if owner has same uid or euid, not
by Amon Ott 10 Jul '25

10 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.36 commit 9b1a9528637f5dc9b7584acfe8d6151098bc5745 Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jul 10 09:11:13 2025 +0200 With CAP fd hiding, do not hide if owner has same uid or euid, not only with fsuid. rsbac/help/helpers.c | 4 ++++ 1 file changed, 4 insertions(+)

1 0

linux-6.12.y 6.12.36 commit b14512d3c8f8 aci_data_structures: rsbac_mount(): also move rsbac_mount_pid reset
by Amon Ott 08 Jul '25

08 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.36 commit b14512d3c8f8fbdc3ec74b6af6eac068b5753453 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jul 8 11:35:47 2025 +0200 aci_data_structures: rsbac_mount(): also move rsbac_mount_pid reset here This fixes the previous commit. rsbac/data_structures/aci_data_structures.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

1 0

linux-6.12.y 6.12.36 commit ebaa4027800c data_structures: serialize RSBAC auto mounts until after per-module
by Amon Ott 08 Jul '25

08 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.36 commit ebaa4027800c56c2c31e789217f7c02725002bc1 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jul 8 09:31:24 2025 +0200 data_structures: serialize RSBAC auto mounts until after per-module mount. rsbac/data_structures/aci_data_structures.c | 3 ++- rsbac/data_structures/acl_data_structures.c | 7 +++---- rsbac/data_structures/auth_data_structures.c | 6 ++---- rsbac/data_structures/mac_data_structures.c | 6 ++---- 4 files changed, 9 insertions(+), 13 deletions(-)

1 0

linux-6.12.y 6.12.36 commit c8e56bb08686 aci_data_structures: use IS_ERR_OR_NULL for pointer checks where ap
by Amon Ott 08 Jul '25

08 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.36 commit c8e56bb08686260e4ede7e7a336361a707c55d99 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jul 8 09:00:04 2025 +0200 aci_data_structures: use IS_ERR_OR_NULL for pointer checks where applicable. rsbac/data_structures/aci_data_structures.c | 47 ++++++++++++++--------------- 1 file changed, 22 insertions(+), 25 deletions(-)

1 0

linux-6.12.y 6.12.36 commit c1af0de103ad aci_data_structures: sanity check vfsmount_p->mnt_sb etc. before us
by Amon Ott 07 Jul '25

07 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.36 commit c1af0de103ad1b41c3eb9f2fc1fe35cbcfec0885 Author: Amon Ott <ao(a)rsbac.org> Date: Mon Jul 7 15:01:09 2025 +0200 aci_data_structures: sanity check vfsmount_p->mnt_sb etc. before use with IS_ERR rsbac/data_structures/aci_data_structures.c | 25 ++++++++++++++++--------- 1 file changed, 16 insertions(+), 9 deletions(-)

1 0

linux-6.1.y 6.1.143 commit f3f470ad2352 Allow R_GET_XATTR on rsbac.dat with CONFIG_RSBAC_DAT_VISIBLE
by Amon Ott 07 Jul '25

07 Jul '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.143 commit f3f470ad2352363b50ed473b7139158b5d0414eb Author: Amon Ott <ao(a)rsbac.org> Date: Fri Mar 21 09:48:29 2025 +0100 Allow R_GET_XATTR on rsbac.dat with CONFIG_RSBAC_DAT_VISIBLE rsbac/adf/adf_main.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-)

1 0

2025

2024

2023

2022

rsbac-commit