7a1e8b80fb
Pull security subsystem updates from James Morris:
"Highlights:
- TPM core and driver updates/fixes
- IPv6 security labeling (CALIPSO)
- Lots of Apparmor fixes
- Seccomp: remove 2-phase API, close hole where ptrace can change
syscall #"
* 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (156 commits)
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
tpm: Add TPM 2.0 support to the Nuvoton i2c driver (NPCT6xx family)
tpm: Factor out common startup code
tpm: use devm_add_action_or_reset
tpm2_i2c_nuvoton: add irq validity check
tpm: read burstcount from TPM_STS in one 32-bit transaction
tpm: fix byte-order for the value read by tpm2_get_tpm_pt
tpm_tis_core: convert max timeouts from msec to jiffies
apparmor: fix arg_size computation for when setprocattr is null terminated
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
apparmor: do not expose kernel stack
apparmor: fix module parameters can be changed after policy is locked
apparmor: fix oops in profile_unpack() when policy_db is not present
apparmor: don't check for vmalloc_addr if kvzalloc() failed
apparmor: add missing id bounds check on dfa verification
apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task
apparmor: use list_next_entry instead of list_entry_next
apparmor: fix refcount race when finding a child profile
apparmor: fix ref count leak when profile sha1 hash is read
apparmor: check that xindex is in trans_table bounds
...
3.0 KiB
menuconfig SAMPLES bool "Sample kernel code" help You can build and test sample kernel code here.
if SAMPLES
config SAMPLE_TRACE_EVENTS tristate "Build trace_events examples -- loadable modules only" depends on EVENT_TRACING && m help This build trace event example modules.
config SAMPLE_TRACE_PRINTK tristate "Build trace_printk module - tests various trace_printk formats" depends on EVENT_TRACING && m help This builds a module that calls trace_printk() and can be used to test various trace_printk() calls from a module.
config SAMPLE_KOBJECT tristate "Build kobject examples -- loadable modules only" depends on m help This config option will allow you to build a number of different kobject sample modules showing how to use kobjects, ksets, and ktypes properly.
If in doubt, say "N" here.
config SAMPLE_KPROBES tristate "Build kprobes examples -- loadable modules only" depends on KPROBES && m help This build several kprobes example modules.
config SAMPLE_KRETPROBES tristate "Build kretprobes example -- loadable modules only" default m depends on SAMPLE_KPROBES && KRETPROBES
config SAMPLE_HW_BREAKPOINT tristate "Build kernel hardware breakpoint examples -- loadable module only" depends on HAVE_HW_BREAKPOINT && m help This builds kernel hardware breakpoint example modules.
config SAMPLE_KFIFO tristate "Build kfifo examples -- loadable modules only" depends on m help This config option will allow you to build a number of different kfifo sample modules showing how to use the generic kfifo API.
If in doubt, say "N" here.
config SAMPLE_KDB tristate "Build kdb command example -- loadable modules only" depends on KGDB_KDB && m help Build an example of how to dynamically add the hello command to the kdb shell.
config SAMPLE_RPMSG_CLIENT tristate "Build rpmsg client sample -- loadable modules only" depends on RPMSG && m help Build an rpmsg client sample driver, which demonstrates how to communicate with an AMP-configured remote processor over the rpmsg bus.
config SAMPLE_LIVEPATCH tristate "Build live patching sample -- loadable modules only" depends on LIVEPATCH && m help Builds a sample live patch that replaces the procfs handler for /proc/cmdline to print "this has been live patched".
config SAMPLE_CONFIGFS tristate "Build configfs patching sample -- loadable modules only" depends on CONFIGFS_FS && m help Builds a sample configfs interface.
config SAMPLE_CONNECTOR tristate "Build connector sample -- loadable modules only" depends on CONNECTOR && m help When enabled, this builds both a sample kernel module for the connector interface and a user space tool to communicate with it. See also Documentation/connector/connector.txt
config SAMPLE_SECCOMP tristate "Build seccomp sample code -- loadable modules only" depends on SECCOMP_FILTER && m help Build samples of seccomp filters using various methods of BPF filter construction.
endif # SAMPLES