{"push_id":912660822,"size":37,"distinct_size":37,"ref":"refs/heads/cm-13.0","head":"19d60819ce706c345bf74e0a3415a3fa32b3671b","before":"d06ce15d9dfee5564678b49fef08cc570891bb6c","commits":[{"sha":"496c86e66a6e89eaa46d35a9b17b63fb6ab57bdd","author":{"email":"69652caca27c8b940640ad396ab71f93cacec34f@linux-foundation.org","name":"Linus Torvalds"},"message":"security: optimize avc_audit() common path\n\navc_audit() did a lot of jumping around and had a big stack frame, all\nfor the uncommon case.\n\nSplit up the uncommon case (which we really can't make go fast anyway)\ninto its own slow function, and mark the conditional branches\nappropriately for the common likely case.\n\nThis causes avc_audit() to no longer show up as one of the hottest\nfunctions on the branch profiles (the new \"perf -b\" thing), and makes\nthe cycle profiles look really nice and dense too.\n\nThe whole audit path is still annoyingly very much one of the biggest\ncosts of name lookup, so these things are worth optimizing for.  I wish\nwe could just tell people to turn it off, but realistically we do need\nit: we just need to make sure that the overhead of the necessary evil is\nas low as possible.\n\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/496c86e66a6e89eaa46d35a9b17b63fb6ab57bdd"},{"sha":"22c66c1b0e5c096351f117e619672dac59b4a5fa","author":{"email":"69652caca27c8b940640ad396ab71f93cacec34f@linux-foundation.org","name":"Linus Torvalds"},"message":"selinux: don't inline slow-path code into avc_has_perm_noaudit()\n\nThe selinux AVC paths remain some of the hottest (and deepest) codepaths\nat filename lookup time, and we make it worse by having the slow path\ncases take up I$ and stack space even when they don't trigger.  Gcc\ntends to always want to inline functions that are just called once -\nnever mind that this might make for slower and worse code in the caller.\n\nSo this tries to improve on it a bit by making the slow-path cases\nexplicitly separate functions that are marked noinline, causing gcc to\nat least no longer allocate stack space for them unless they are\nactually called.  It also seems to help register allocation a tiny bit,\nsince gcc now doesn't take the slow case code into account.\n\nUninlining the slow path may also allow us to inline the remaining hot\npath into the one caller that actually matters: avc_has_perm_flags().\nI'll have to look at that separately, but both avc_audit() and\navc_has_perm_noaudit() are now small and lean enough that inlining them\nmay make sense.\n\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/22c66c1b0e5c096351f117e619672dac59b4a5fa"},{"sha":"3a0ed70002770aacaa2b70b68e7ebdbc696e588c","author":{"email":"69652caca27c8b940640ad396ab71f93cacec34f@linux-foundation.org","name":"Linus Torvalds"},"message":"selinux: inline avc_audit() and avc_has_perm_noaudit() into caller\n\nNow that all the slow-path code is gone from these functions, we can\ninline them into the main caller - avc_has_perm_flags().\n\nNow the compiler can see that 'avc' is allocated on the stack for this\ncase, which helps register pressure a bit.  It also actually shrinks the\ntotal stack frame, because the stack frame that avc_has_perm_flags()\nalways needed (for that 'avc' allocation) is now sufficient for the\ninlined functions too.\n\nInlining isn't bad - but mindless inlining of cold code (see the\nprevious commit) is.\n\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/3a0ed70002770aacaa2b70b68e7ebdbc696e588c"},{"sha":"e4069266b857fe5d805c3419bfa83df471ebd986","author":{"email":"b0b36e3cd9ea4e5739ff430a3056fabf2fdb0376@redhat.com","name":"Eric Paris"},"message":"SELinux: remove avd from slow_avc_audit()\n\nWe don't use the argument, so remove it.\n\nSigned-off-by: Eric Paris <eparis@redhat.com>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/e4069266b857fe5d805c3419bfa83df471ebd986"},{"sha":"883a9a27bc12b3281b668d6d6d4921d919575902","author":{"email":"b0b36e3cd9ea4e5739ff430a3056fabf2fdb0376@redhat.com","name":"Eric Paris"},"message":"SELinux: allow default source/target selectors for user/role/range\n\nWhen new objects are created we have great and flexible rules to\ndetermine the type of the new object.  We aren't quite as flexible or\nmature when it comes to determining the user, role, and range.  This\npatch adds a new ability to specify the place a new objects user, role,\nand range should come from.  For users and roles it can come from either\nthe source or the target of the operation.  aka for files the user can\neither come from the source (the running process and todays default) or\nit can come from the target (aka the parent directory of the new file)\n\nexamples always are done with\ndirectory context: system_u:object_r:mnt_t:s0-s0:c0.c512\nprocess context: unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023\n\n[no rule]\n\tunconfined_u:object_r:mnt_t:s0   test_none\n[default user source]\n\tunconfined_u:object_r:mnt_t:s0   test_user_source\n[default user target]\n\tsystem_u:object_r:mnt_t:s0       test_user_target\n[default role source]\n\tunconfined_u:unconfined_r:mnt_t:s0 test_role_source\n[default role target]\n\tunconfined_u:object_r:mnt_t:s0   test_role_target\n[default range source low]\n\tunconfined_u:object_r:mnt_t:s0 test_range_source_low\n[default range source high]\n\tunconfined_u:object_r:mnt_t:s0:c0.c1023 test_range_source_high\n[default range source low-high]\n\tunconfined_u:object_r:mnt_t:s0-s0:c0.c1023 test_range_source_low-high\n[default range target low]\n\tunconfined_u:object_r:mnt_t:s0 test_range_target_low\n[default range target high]\n\tunconfined_u:object_r:mnt_t:s0:c0.c512 test_range_target_high\n[default range target low-high]\n\tunconfined_u:object_r:mnt_t:s0-s0:c0.c512 test_range_target_low-high\n\nSigned-off-by: Eric Paris <eparis@redhat.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/883a9a27bc12b3281b668d6d6d4921d919575902"},{"sha":"611ae909162d32053c2aa6baf736936d3d5da4f1","author":{"email":"b0b36e3cd9ea4e5739ff430a3056fabf2fdb0376@redhat.com","name":"Eric Paris"},"message":"SELinux: add default_type statements\n\nBecause Fedora shipped userspace based on my development tree we now\nhave policy version 27 in the wild defining only default user, role, and\nrange.  Thus to add default_type we need a policy.28.\n\nSigned-off-by: Eric Paris <eparis@redhat.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/611ae909162d32053c2aa6baf736936d3d5da4f1"},{"sha":"052a36b88b73fb2e75f60d8bbe73bee283a52d73","author":{"email":"b3eef4c91db124096f17b389c40733c06b7d5036@btinternet.com","name":"Richard Haines"},"message":"SELinux: Update policy version to support constraints info\n\nUpdate the policy version (POLICYDB_VERSION_CONSTRAINT_NAMES) to allow\nholding of policy source info for constraints.\n\nSigned-off-by: Richard Haines <richard_c_haines@btinternet.com>\nAcked-by: Stephen Smalley <sds@tycho.nsa.gov>\nSigned-off-by: Paul Moore <pmoore@redhat.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/052a36b88b73fb2e75f60d8bbe73bee283a52d73"},{"sha":"e2e3c5ac4fc8988f6ad3f944ba14c575ac246590","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"security: lsm_audit: add ioctl specific auditing\n\nAdd information about ioctl calls to the LSM audit data. Log the\nfile path and command number.\n\nBug: 18087110\nChange-Id: Idbbd106db6226683cb30022d9e8f6f3b8fab7f84\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/e2e3c5ac4fc8988f6ad3f944ba14c575ac246590"},{"sha":"41c98051a1377b8d76ab9d4a383ad78e905d3325","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"selinux: Report permissive mode in avc: denied messages.\n\nWe cannot presently tell from an avc: denied message whether access was in\nfact denied or was allowed due to global or per-domain permissive mode.\nAdd a permissive= field to the avc message to reflect this information.\n\nChange-Id: I23adf43e417687f1da7354d392d37f5fabbd805e\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/41c98051a1377b8d76ab9d4a383ad78e905d3325"},{"sha":"9716fcf04a4c6df5da3ddd7ba5b1d68338cc4e9d","author":{"email":"fbe788dcd509b324901fbdfe505a4d610d560569@google.com","name":"Jeff Vander Stoep"},"message":"SELinux: per-command whitelisting of ioctls\n\n note that this patch depends on a prior patch that is already in\n android-3.4 but has not apparently found its way into the msm 3.4\n branches (but is included in exynos and tegra),\n https://android-review.googlesource.com/#/c/92962/\n\nExtend the generic ioctl permission check with support for per-command\nfiltering. Source/target/class sets including the ioctl permission may\nadditionally include a set of commands. Example:\n\nallow <source> <target>:<class> { 0x8910-0x8926 0x892A-0x8935 }\nauditallow <source> <target>:<class> 0x892A\n\nWhen ioctl commands are omitted only the permissions are checked. This\nfeature is intended to provide finer granularity for the ioctl\npermission which may be too imprecise in some circumstances. For\nexample, the same driver may use ioctls to provide important and\nbenign functionality such as driver version or socket type as well as\ndangerous capabilities such as debugging features, read/write/execute\nto physical memory or access to sensitive data. Per-command filtering\nprovides a mechanism to reduce the attack surface of the kernel, and\nlimit applications to the subset of commands required.\n\nThe format of the policy binary has been modified to include ioctl\ncommands, and the policy version number has been incremented to\nPOLICYDB_VERSION_IOCTL_OPERATIONS=30 to account for the format change.\n\nBug: 18087110\nChange-Id: Ibf0e36728f6f3f0d5af56ccdeddee40800af689d\nSigned-off-by: Jeff Vander Stoep <jeffv@google.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/9716fcf04a4c6df5da3ddd7ba5b1d68338cc4e9d"},{"sha":"99620dc80e6f8da54db8d183304f442984633571","author":{"email":"17b9e1c64588c7fa6419b4d29dc1f4426279ba01@gernoth.net","name":"Michael Gernoth"},"message":"ext3: ignore ext4-option nomblk_io_submit\n\nChange-Id: I7b85e62f61aafbb5d46f8a049ffbeea021346353","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/99620dc80e6f8da54db8d183304f442984633571"},{"sha":"45c45dbb775ef6aae421e4f7d6401eb973dc2f42","author":{"email":"611d453c03d02ce713e72b62ff6a901ea7e9cd77@gmail.com","name":"Sasha Levin"},"message":"hashtable: introduce a small and naive hashtable\n\nThis hashtable implementation is using hlist buckets to provide a simple\nhashtable to prevent it from getting reimplemented all over the kernel.\n\nSigned-off-by: Sasha Levin <levinsasha928@gmail.com>\n[ Merging this now, so that subsystems can start applying Sasha's\n  patches that use this   - Linus ]\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/45c45dbb775ef6aae421e4f7d6401eb973dc2f42"},{"sha":"54096333e46f54e51c08eb333f5696a630c20932","author":{"email":"a4a9764687115057dfb6081f6c434bf20156ee3b@google.com","name":"jinqian"},"message":"proc: uid: Adds accounting for the cputimes per uid.\n\nAdds proc files /proc/uid_cputime/show_uid_stat and\n/proc/uid_cputime/remove_uid_range.\n\nshow_uid_stat lists the total utime and stime for the active as well as\nterminated processes for each of the uids.\n\nWriting a range of uids to remove_uid_range will delete the accounting\nfor all the uids within that range.\n\nChange-Id: I21d9210379da730b33ddc1a0ea663c8c9d2ac15b","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/54096333e46f54e51c08eb333f5696a630c20932"},{"sha":"dc53e4ec4f5ede9759b70ffed58a1be2314144c8","author":{"email":"ff359ca7f9aedbb05cd6aa3d17e7b3b3ad3b25c9@google.com","name":"Ruchi Kandoi"},"message":"proc: uid: Changes the thread notifier to profile event notifier.\n\nIn order to keep the code consistent with all other platforms, the\nthread notifier is changed to profile event notifier.\n\nChange-Id: I5b996c789927b42dacba10af6fe81a21866e2c8f","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/dc53e4ec4f5ede9759b70ffed58a1be2314144c8"},{"sha":"5890849a2250bee9beb9486de904a259c861fbec","author":{"email":"a4a9764687115057dfb6081f6c434bf20156ee3b@google.com","name":"Jin Qian"},"message":"proc: uid_cputime: fix show_uid_stat permission\n\nSigned-off-by: Jin Qian <jinqian@google.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/5890849a2250bee9beb9486de904a259c861fbec"},{"sha":"9c006b546f357cfe4a35a77417ad9359c5c33e72","author":{"email":"ff359ca7f9aedbb05cd6aa3d17e7b3b3ad3b25c9@google.com","name":"Ruchi Kandoi"},"message":"uid_cputime: Extends the cputime functionality to report power per uid\n\n/proc/uid_cputime/show_uid_stats shows a third field power for each of\nthe uids. It represents the power in the units (uAusec)\n\nBug: 21498425\nChange-Id: I52fdc5e59647e9dc97561a26d56f462a2689ba9c\nSigned-off-by: Ruchi Kandoi <kandoiruchi@google.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/9c006b546f357cfe4a35a77417ad9359c5c33e72"},{"sha":"bd734db0677760b8addd716519516be408be432c","author":{"email":"ff359ca7f9aedbb05cd6aa3d17e7b3b3ad3b25c9@google.com","name":"Ruchi Kandoi"},"message":"uid_cputime: Fixes double accounting race condition on task exit.\n\nThis avoids the race where a particular process is terminating and we\nread the show_uid_stats. At this time since the task_struct still exists\nand we will account for the terminating process as one of the active\ntask, where as the stats would have been added in the task exit\ncallback.\n\nBug: 22064385\nChange-Id: Id2ae04b33fcd230eda9683a41b6019d4dd8f5d85\nSigned-off-by: Jin Qian <jinqian@google.com>\nSigned-off-by: Ruchi Kandoi <kandoiruchi@google.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/bd734db0677760b8addd716519516be408be432c"},{"sha":"50e3cfb653fc6127dcf340b74e3f54447efc082f","author":{"email":"a4a9764687115057dfb6081f6c434bf20156ee3b@google.com","name":"Jin Qian"},"message":"uid_cputime: fix overflow when printing cputime\n\ncputime_t is u64. Use %llu instead of %u.\n\nBug: 22461683\nChange-Id: Ia9a343a826e62cc73d2f61caf15651aee0233e9a\nSigned-off-by: Jin Qian <jinqian@google.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/50e3cfb653fc6127dcf340b74e3f54447efc082f"},{"sha":"2ec6e5139cac4e2a99d50b8a071e37cd663c8d9a","author":{"email":"c11fa6a468cd0603c031ecceca207a4a86f97358@google.com","name":"Thierry Strudel"},"message":"Revert \"uid_cputime: fix overflow when printing cputime\"\n\nThis reverts commit aeeff0aac6407f36b2d546901f099ade70c42f9e.\n\nChange-Id: I465e529ccb3d5efac688f2ecc23e15b8ea6d95ef","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/2ec6e5139cac4e2a99d50b8a071e37cd663c8d9a"},{"sha":"5a50af29e9ccd13f57ce0953f49e4aab53368edb","author":{"email":"a4a9764687115057dfb6081f6c434bf20156ee3b@google.com","name":"Jin Qian"},"message":"uid_cputime: fix cputime overflow\n\nConverting cputime_t to usec caused overflow when the value is greater\nthan 1 hour. Use msec and convert to unsigned long long to support bigger\nrange.\n\nBug: 22461683\n\nChange-Id: I853fe3e8e7dbf0d3e2cc5c6f9688a5a6e1f1fb3e\nSigned-off-by: Jin Qian <jinqian@google.com>","distinct":true,"url":"https://api.github.com/repos/JooJooBee666/android_kernel_motorola_omap4-common/commits/5a50af29e9ccd13f57ce0953f49e4aab53368edb"}]}