June 2026 - rsbac-commit - mail.rsbac.org

linux-6.12.y 6.12.94 commit b180a8e6654a Consistently log device and parent in rsbac_mount() and rsbac_updat
by Amon Ott 25 Jun '26

25 Jun '26

Repository: https://git.rsbac.org/?repository=linux-6.12.y Commit: https://git.rsbac.org/?repository=linux-6.12.y&commit=b180a8e6654a5072a38c5… LTS kernel 6.12 Current version: 6.12.94 commit b180a8e6654a5072a38c57b3f692561ba861e76a Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jun 25 12:01:43 2026 +0200 Consistently log device and parent in rsbac_mount() and rsbac_update_parent(). Also, skip delayed root device mount, rsbac_init() took care of that. rsbac/data_structures/aci_data_structures.c | 36 +++++++++++++++++++++++++---- 1 file changed, 31 insertions(+), 5 deletions(-)

1 0

linux-6.18.y 6.18.36 commit 4cc69f2dfa0a Consistently log device and parent in rsbac_mount() and rsbac_updat
by Amon Ott 25 Jun '26

25 Jun '26

Repository: https://git.rsbac.org/?repository=linux-6.18.y Commit: https://git.rsbac.org/?repository=linux-6.18.y&commit=4cc69f2dfa0a31b3a0871… LTS kernel 6.18 Current version: 6.18.36 commit 4cc69f2dfa0a31b3a0871821daf04ae6a136868b Author: Amon Ott <ao(a)rsbac.org> Date: Wed Jun 24 19:18:53 2026 +0200 Consistently log device and parent in rsbac_mount() and rsbac_update_parent(). Also, skip delayed root device mount, rsbac_init() took care of that. rsbac/data_structures/aci_data_structures.c | 36 +++++++++++++++++++++++++---- 1 file changed, 31 insertions(+), 5 deletions(-)

1 0

linux-6.18.y 6.18.36 commit 793174bfd996 Intercept sys_kcmp(), sys_pidfd_getfd(), sys_process_madvise(), pro
by Amon Ott 24 Jun '26

24 Jun '26

Repository: https://git.rsbac.org/?repository=linux-6.18.y Commit: https://git.rsbac.org/?repository=linux-6.18.y&commit=793174bfd996123200e3e… LTS kernel 6.18 Current version: 6.18.36 commit 793174bfd996123200e3e539a11efc186c2866c3 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Jun 24 15:37:09 2026 +0200 Intercept sys_kcmp(), sys_pidfd_getfd(), sys_process_madvise(), process_vm_rw_core() kernel/kcmp.c | 34 ++++++++++++++++++++++++++++++++++ kernel/pid.c | 22 ++++++++++++++++++++++ mm/madvise.c | 22 ++++++++++++++++++++++ mm/process_vm_access.c | 22 ++++++++++++++++++++++ 4 files changed, 100 insertions(+)

1 0

linux-6.18.y 6.18.36 commit ec0a34e8afdd In adf_main, always treat UNDEFINED decision results as NOT_GRANTED
by Amon Ott 24 Jun '26

24 Jun '26

Repository: https://git.rsbac.org/?repository=linux-6.18.y Commit: https://git.rsbac.org/?repository=linux-6.18.y&commit=ec0a34e8afdd7c1f74af3… LTS kernel 6.18 Current version: 6.18.36 commit ec0a34e8afdd7c1f74af3905142e3bf789c2e07a Author: Amon Ott <ao(a)rsbac.org> Date: Wed Jun 24 13:58:57 2026 +0200 In adf_main, always treat UNDEFINED decision results as NOT_GRANTED. Since UNDEFINED should only be returned by modules in case of bugs, the expected impact is low. Additionally, fix one wrong return value in rsbac_rc_check_comp() and cleanup some old code in rsbac_rc_check_log(). rsbac/adf/acl/acl_main.c | 6 +++--- rsbac/adf/adf_main.c | 21 +++++++++++++++++++-- rsbac/data_structures/rc_data_structures.c | 19 +++---------------- 3 files changed, 25 insertions(+), 21 deletions(-)

1 0

linux-6.18.y 6.18.36 commit e9c8fff2a2a6 Update device mount parent pointers in pivot_root() and do_move_mou
by Amon Ott 24 Jun '26

24 Jun '26

Repository: https://git.rsbac.org/?repository=linux-6.18.y Commit: https://git.rsbac.org/?repository=linux-6.18.y&commit=e9c8fff2a2a654c972519… LTS kernel 6.18 Current version: 6.18.36 commit e9c8fff2a2a654c97251947f226b460a5ebb02a5 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Jun 24 10:11:31 2026 +0200 Update device mount parent pointers in pivot_root() and do_move_mount(). fs/namespace.c | 22 +++++++++- include/rsbac/aci.h | 5 ++- rsbac/data_structures/aci_data_structures.c | 68 +++++++++++++++++++++++++++++ 3 files changed, 93 insertions(+), 2 deletions(-)

1 0

linux-5.10.y 5.10.259 commit 9bf446194753 aci_data_structures: never force a parent mount, it is unclean and
by Amon Ott 23 Jun '26

23 Jun '26

Repository: https://git.rsbac.org/?repository=linux-5.10.y Commit: https://git.rsbac.org/?repository=linux-5.10.y&commit=9bf44619475396890263a… LTS kernel 5.10 Current version: 5.10.259 commit 9bf44619475396890263ad5cab4e96b1b23c9ca0 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 23 12:30:41 2026 +0200 aci_data_structures: never force a parent mount, it is unclean and can deadlock. rsbac/data_structures/aci_data_structures.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-)

1 0

linux-5.15.y 5.15.210 commit 2140e2c6e2b8 aci_data_structures: never force a parent mount, it is unclean and
by Amon Ott 23 Jun '26

23 Jun '26

Repository: https://git.rsbac.org/?repository=linux-5.15.y Commit: https://git.rsbac.org/?repository=linux-5.15.y&commit=2140e2c6e2b86f1762764… LTS kernel 5.15 Current version: 5.15.210 commit 2140e2c6e2b86f1762764200711cd404f66cfe19 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 23 11:40:05 2026 +0200 aci_data_structures: never force a parent mount, it is unclean and can deadlock. rsbac/data_structures/aci_data_structures.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-)

1 0

linux-6.1.y 6.1.176 commit 84dd42b44a8b aci_data_structures: never force a parent mount, it is unclean and
by Amon Ott 23 Jun '26

23 Jun '26

Repository: https://git.rsbac.org/?repository=linux-6.1.y Commit: https://git.rsbac.org/?repository=linux-6.1.y&commit=84dd42b44a8b427d712a01… LTS kernel 6.1 Current version: 6.1.176 commit 84dd42b44a8b427d712a01f9ef7681ca3a931a28 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 23 11:20:48 2026 +0200 aci_data_structures: never force a parent mount, it is unclean and can deadlock. rsbac/data_structures/aci_data_structures.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-)

1 0

linux-6.6.y 6.6.143 commit 939d5a609d45 aci_data_structures: never force a parent mount, it is unclean and
by Amon Ott 23 Jun '26

23 Jun '26

Repository: https://git.rsbac.org/?repository=linux-6.6.y Commit: https://git.rsbac.org/?repository=linux-6.6.y&commit=939d5a609d4531fa22ed02… LTS kernel 6.6 Current version: 6.6.143 commit 939d5a609d4531fa22ed026ba19ca028786bcdc3 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 23 10:44:26 2026 +0200 aci_data_structures: never force a parent mount, it is unclean and can deadlock. rsbac/data_structures/aci_data_structures.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-)

1 0

linux-6.12.y 6.12.94 commit 2d853981ec2e aci_data_structures: never force a parent mount, it is unclean and
by Amon Ott 23 Jun '26

23 Jun '26

Repository: https://git.rsbac.org/?repository=linux-6.12.y Commit: https://git.rsbac.org/?repository=linux-6.12.y&commit=2d853981ec2e9b4b1d8e3… LTS kernel 6.12 Current version: 6.12.94 commit 2d853981ec2e9b4b1d8e38f8d3684600bfcaa455 Author: Amon Ott <ao(a)rsbac.org> Date: Tue Jun 23 10:14:17 2026 +0200 aci_data_structures: never force a parent mount, it is unclean and can deadlock. rsbac/data_structures/aci_data_structures.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-)

1 0

2026

2025

2024

2023

2022

rsbac-commit June 2026