https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary

RSBAC for Linux 5.15 (Long Term)

Current version: 5.15.172

commit 4eec65b6e82f790fe4531a810c0a195914f464ae Author: Amon Ott ao@rsbac.org Date: Fri Nov 15 08:24:17 2024 +0100

Check for and use IPC memfd targets with several request types. Changed for requests GET_PERMISSIONS_DATA, GET_STATUS_DATA, TRACE, TRUNCATE, MAP_EXEC and extended RSBAC_IPC_REQUEST_VECTOR with TRACE, TRUNCATE, MAP_EXEC.

fs/exec.c | 18 +++++++++++++----- fs/locks.c | 26 ++++++++++++++++++-------- fs/notify/fanotify/fanotify_user.c | 11 ++++++++--- fs/notify/inotify/inotify_user.c | 11 ++++++++--- fs/open.c | 31 ++++++++++++++++++++++--------- include/rsbac/request_groups.h | 5 ++++- mm/mmap.c | 14 ++++++++++---- mm/mprotect.c | 14 ++++++++++---- rsbac/adf/adf_check.c | 9 +++++++-- rsbac/adf/mac/mac_main.c | 4 +++- rsbac/adf/rc/rc_main.c | 5 ++++- 11 files changed, 107 insertions(+), 41 deletions(-)