Linux v5.15 was released on Sunday, October 31st - Happy Halloween! - the SELinux and audit highlights are below:
SELinux
-
In Linux v5.13 we fixed a problem where the LSM hooks were not properly differentiating between the subjective and objective LSM credentials. Unfortunately that fix was not correct in a number of areas, especially when referencing credentials of a task other than the one currently executing. We’ve fixed this in v5.15 and the patch should find it’s way into the currently supported upstream stable trees (I believe the patch has already been backported at the time of writing).
-
Support was added, via the “mctp_socket” object class, for the Management Component Transport Protocol (MCTP).
-
A small improvement was made for SELinux operations on systems when audit is not enabled.
Audit
-
Fixed a problem where the AUDIT_TRIM command, e.g.
auditctl -t, could result in a file watch reference counting problem which could result in a kernel error due to a use-after-free condition. As the AUDIT_TRIM command typically requires elevated privileges, the risk of malicious unprivileged users triggering this bug is low. -
Fixed a potential NULL pointer dereference when performing the in-kernel audit filtering.
SOCIAL SHARE CARD GENERATOR