{"push_id":726357121,"size":14,"distinct_size":14,"ref":"refs/heads/feature-test","head":"cbe4a643a112ba62e33fd8a13d9a0e88e219adef","before":"a644cc71a1f0f677ba0f7a269d8ea5847ec31ba1","commits":[{"sha":"7c160535e4213d95df187a43984f9cb444bc1723","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"security: lsm_audit: add ioctl specific auditing\n\nAdd information about ioctl calls to the LSM audit data. Log the\nfile path and command number.\n\nBug: 18087110\nChange-Id: Idbbd106db6226683cb30022d9e8f6f3b8fab7f84\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/7c160535e4213d95df187a43984f9cb444bc1723"},{"sha":"8e538d477b6ab298403f47cd470ca08394e64bc4","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"SELinux: per-command whitelisting of ioctls\n\nExtend the generic ioctl permission check with support for per-command\nfiltering. Source/target/class sets including the ioctl permission may\nadditionally include a set of commands. Example:\n\nallow <source> <target>:<class> { 0x8910-0x8926 0x892A-0x8935 }\nauditallow <source> <target>:<class> 0x892A\n\nWhen ioctl commands are omitted only the permissions are checked. This\nfeature is intended to provide finer granularity for the ioctl\npermission which may be too imprecise in some circumstances. For\nexample, the same driver may use ioctls to provide important and\nbenign functionality such as driver version or socket type as well as\ndangerous capabilities such as debugging features, read/write/execute\nto physical memory or access to sensitive data. Per-command filtering\nprovides a mechanism to reduce the attack surface of the kernel, and\nlimit applications to the subset of commands required.\n\nThe format of the policy binary has been modified to include ioctl\ncommands, and the policy version number has been incremented to\nPOLICYDB_VERSION_IOCTL_OPERATIONS=30 to account for the format change.\n\nBug: 18087110\nChange-Id: Ibf0e36728f6f3f0d5af56ccdeddee40800af689d\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>\n\nConflicts:\n\tsecurity/selinux/include/security.h\n\tsecurity/selinux/ss/policydb.c","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/8e538d477b6ab298403f47cd470ca08394e64bc4"},{"sha":"c37837404a3cc7861ef5ba49b980520934ab9bde","author":{"email":"7864bb1e0e12322ea18ea731d051b95b75140567@6wind.com","name":"Nicolas Dichtel"},"message":"selinux/nlmsg: add XFRM_MSG_NEWSPDINFO\n\ncommit 2b7834d3e1b828429faa5dc41a480919e52d3f31 upstream (net-next).\n\nThis new command is missing.\n\nChange-Id: If511000c19aa9af7220ff775d88ace9834b35dcb\nFixes: 880a6fab8f6b (\"xfrm: configure policy hash table thresholds by netlink\")\nReported-by: Christophe Gouault <christophe.gouault@6wind.com>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/c37837404a3cc7861ef5ba49b980520934ab9bde"},{"sha":"1edb7de15e1f4974ee1011e30d5f4eb4535b6e88","author":{"email":"7864bb1e0e12322ea18ea731d051b95b75140567@6wind.com","name":"Nicolas Dichtel"},"message":"selinux/nlmsg: add XFRM_MSG_GETSPDINFO\n\ncommit 5e6deebafb45fb271ae6939d48832e920b8fb74e upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Id0a0d9bf7a4af98a8f761fec902d1296138a911f\nFixes: ecfd6b183780 (\"[XFRM]: Export SPD info\")\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/1edb7de15e1f4974ee1011e30d5f4eb4535b6e88"},{"sha":"350738c63d510f7c379f99f6c60902bd8e013e49","author":{"email":"7864bb1e0e12322ea18ea731d051b95b75140567@6wind.com","name":"Nicolas Dichtel"},"message":"selinux/nlmsg: add XFRM_MSG_[NEW|GET]SADINFO\n\ncommit 5b5800fad072133e4a9c2efbf735baaac83dec86 upstream (net-next).\n\nThese commands are missing.\n\nChange-Id: I3fd1d3d700592c653e1a5c5199125805d55aaa95\nFixes: 28d8909bc790 (\"[XFRM]: Export SAD info.\")\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/350738c63d510f7c379f99f6c60902bd8e013e49"},{"sha":"6f73b165995ef00a6cec2d1bf0eb487d102ab614","author":{"email":"7864bb1e0e12322ea18ea731d051b95b75140567@6wind.com","name":"Nicolas Dichtel"},"message":"selinux/nlmsg: add XFRM_MSG_REPORT\n\ncommit b0b59b0056acd6f157a04cc895f7e24692fb08aa upstream (net-next).\n\nThis command is missing.\n\nChange-Id: I8fa3b1b9815296d3b001244d2212f79f5654bd01\nFixes: 97a64b4577ae (\"[XFRM]: Introduce XFRM_MSG_REPORT.\")\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/6f73b165995ef00a6cec2d1bf0eb487d102ab614"},{"sha":"75771d755a4f26f405c3a020c6b9ab0107e5e93c","author":{"email":"7864bb1e0e12322ea18ea731d051b95b75140567@6wind.com","name":"Nicolas Dichtel"},"message":"selinux/nlmsg: add XFRM_MSG_MIGRATE\n\ncommit 8d465bb777179c4bea731b828ec484088cc9fbc1 upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Id2c9344ca1ab2c96e0b758ad1efb38e16cf23b86\nFixes: 5c79de6e79cd (\"[XFRM]: User interface for handling XFRM_MSG_MIGRATE\")\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/75771d755a4f26f405c3a020c6b9ab0107e5e93c"},{"sha":"6baae81c7c7c7157a0162fc22099648f0dc352e5","author":{"email":"7864bb1e0e12322ea18ea731d051b95b75140567@6wind.com","name":"Nicolas Dichtel"},"message":"selinux/nlmsg: add XFRM_MSG_MAPPING\n\ncommit bd2cba07381a6dba60bc1c87ed8b37931d244da1 upstream (net-next).\n\nThis command is missing.\n\nChange-Id: Ida52130382e42355e5f3b39134aa61a1ea98026d\nFixes: 3a2dfbe8acb1 (\"xfrm: Notify changes in UDP encapsulation via netlink\")\nCC: Martin Willi <martin@strongswan.org>\nReported-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/6baae81c7c7c7157a0162fc22099648f0dc352e5"},{"sha":"2da160ad1733408a380c14eca3c943420c966ccd","author":{"email":"88a1d58bf22a647dce58dd91f9595600dceabba9@redhat.com","name":"Paul Moore"},"message":"selinux: add SOCK_DIAG_BY_FAMILY to the list of netlink message types\n\ncommit 6a96e15096da6e7491107321cfa660c7c2aa119d upstream.\n\nThe SELinux AF_NETLINK/NETLINK_SOCK_DIAG socket class was missing the\nSOCK_DIAG_BY_FAMILY definition which caused SELINUX_ERR messages when\nthe ss tool was run.\n\n # ss\n Netid  State  Recv-Q Send-Q  Local Address:Port   Peer Address:Port\n u_str  ESTAB  0      0                  * 14189             * 14190\n u_str  ESTAB  0      0                  * 14145             * 14144\n u_str  ESTAB  0      0                  * 14151             * 14150\n {...}\n # ausearch -m SELINUX_ERR\n ----\n time->Thu Jan 23 11:11:16 2014\n type=SYSCALL msg=audit(1390493476.445:374):\n  arch=c000003e syscall=44 success=yes exit=40\n  a0=3 a1=7fff03aa11f0 a2=28 a3=0 items=0 ppid=1852 pid=1895\n  auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0\n  tty=pts0 ses=1 comm=\"ss\" exe=\"/usr/sbin/ss\"\n  subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)\n type=SELINUX_ERR msg=audit(1390493476.445:374):\n  SELinux:  unrecognized netlink message type=20 for sclass=32\n\nChange-Id: I22218ec620bc3ee6396145f1c2ad8ed222648309\nSigned-off-by: Paul Moore <pmoore@redhat.com>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/2da160ad1733408a380c14eca3c943420c966ccd"},{"sha":"fecc7709b5b31129d9b2d8e7fb7755b0d5bf7b90","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"SELinux: use deletion-safe iterator to free list\n\nThis code is not exercised by policy version 26, but will be upon\nupgrade to policy version 30.\n\nBug: 18087110\nChange-Id: I07c6f34607713294a6a12c43a64d9936f0602200\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/fecc7709b5b31129d9b2d8e7fb7755b0d5bf7b90"},{"sha":"fc1e5c940d9288ebd5a49d4299cf3aaa7cbbe2bc","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"android: configs: Enable SELinux and its dependencies.\n\nChange-Id: I979813b95c0a9a79913df0913e6888f566da5ff1\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/fc1e5c940d9288ebd5a49d4299cf3aaa7cbbe2bc"},{"sha":"ef4142127317b41f8e7c8b8c6a1a8547cece9bad","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"SELinux: ss: Fix policy write for ioctl operations\n\nSecurity server omits the type field when writing out the contents of the\navtab from /sys/fs/selinux/policy. This leads to a corrupt output. No impact\non the running kernel or its loaded policy. Impacts CTS neverallow tests.\n\nBug: 20665861\nChange-Id: I657e18013dd5a1f40052bc2b02dd8e0afee9bcfb\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/ef4142127317b41f8e7c8b8c6a1a8547cece9bad"},{"sha":"1d6fe8fc0793634a0c5d4fb8ef679c06bacd54a1","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"selinux: enable per-file labeling for debugfs files.\n\nupstream commit 6f29997f4a3117169eeabd41dbea4c1bd94a739c\n\nAdd support for per-file labeling of debugfs files so that\nwe can distinguish them in policy.  This is particularly\nimportant in Android where certain debugfs files have to be writable\nby apps and therefore the debugfs directory tree can be read and\nsearched by all.\n\nSince debugfs is entirely kernel-generated, the directory tree is\nimmutable by userspace, and the inodes are pinned in memory, we can\nsimply use the same approach as with proc and label the inodes from\npolicy based on pathname from the root of the debugfs filesystem.\nGeneralize the existing labeling support used for proc and reuse it\nfor debugfs too.\n\n[sds:  Back-ported to 3.10.  superblock_security_struct flags field\nis only unsigned char in 3.10 so we have to redefine SE_SBGENFS.\nHowever, this definition is kernel-private, not exposed to userspace\nor stored anywhere persistent.]\n\nChange-Id: I6460fbed6bb6bd36eb8554ac8c4fdd574edf3b07\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/1d6fe8fc0793634a0c5d4fb8ef679c06bacd54a1"},{"sha":"cbe4a643a112ba62e33fd8a13d9a0e88e219adef","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"selinux: enable genfscon labeling for sysfs and pstore files\n\nSupport per-file labeling of sysfs and pstore files based on\ngenfscon policy entries.  This is safe because the sysfs\nand pstore directory tree cannot be manipulated by userspace,\nexcept to unlink pstore entries.\nThis provides an alternative method of assigning per-file labeling\nto sysfs or pstore files without needing to set the labels from\nuserspace on each boot.  The advantages of this approach are that\nthe labels are assigned as soon as the dentry is first instantiated\nand userspace does not need to walk the sysfs or pstore tree and\nset the labels on each boot.  The limitations of this approach are\nthat the labels can only be assigned based on pathname prefix matching.\nYou can initially assign labels using this mechanism and then change\nthem at runtime via setxattr if allowed to do so by policy.\n\nChange-Id: If5999785fdc1d24d869b23ae35cd302311e94562\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>\nSuggested-by: Dominick Grift <dac.override@gmail.com>","distinct":true,"url":"https://api.github.com/repos/ramsudharsan/android_kernel_motorola_msm8916/commits/cbe4a643a112ba62e33fd8a13d9a0e88e219adef"}]}