10 Sep, 2005

20 commits

  • This patch modifies ext2 to call the inode_init_security LSM hook to obtain
    the security attribute for a newly created inode and to set the resulting
    attribute on the new inode. This parallels the existing processing for
    setting ACLs on newly created inodes.

    Signed-off-by: Stephen Smalley
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Stephen Smalley
     
  • The following patch set enables atomic security labeling of newly created
    inodes by altering the fs code to invoke a new LSM hook to obtain the security
    attribute to apply to a newly created inode and to set up the incore inode
    security state during the inode creation transaction. This parallels the
    existing processing for setting ACLs on newly created inodes. Otherwise, it
    is possible for new inodes to be accessed by another thread via the dcache
    prior to complete security setup (presently handled by the
    post_create/mkdir/... LSM hooks in the VFS) and a newly created inode may be
    left unlabeled on the disk in the event of a crash. SELinux presently works
    around the issue by ensuring that the incore inode security label is
    initialized to a special SID that is inaccessible to unprivileged processes
    (in accordance with policy), thereby preventing inappropriate access but
    potentially causing false denials on legitimate accesses. A simple test
    program demonstrates such false denials on SELinux, and the patch solves the
    problem. Similar such false denials have been encountered in real
    applications.

    This patch defines a new inode_init_security LSM hook to obtain the security
    attribute to apply to a newly created inode and to set up the incore inode
    security state for it, and adds a corresponding hook function implementation
    to SELinux.

    Signed-off-by: Stephen Smalley
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Stephen Smalley
     
  • Support for the new RBHMA4500 eval board for the TX4938. General update
    from the 8250 ancestor of this driver. Replace use of deprecated
    interfaces.

    Signed-off-by: Ralf Baechle
    Signed-off-by: Atsushi Nemoto
    Acked-by: Russell King
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Ralf Baechle
     
  • Update the file systems in fs/ implementing a delete_inode() callback to
    call truncate_inode_pages(). One implementation note: In developing this
    patch I put the calls to truncate_inode_pages() at the very top of those
    filesystems delete_inode() callbacks in order to retain the previous
    behavior. I'm guessing that some of those could probably be optimized.

    Signed-off-by: Mark Fasheh
    Acked-by: Christoph Hellwig
    Signed-off-by: Hugh Dickins
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Mark Fasheh
     
  • Allow file systems supporting ->delete_inode() to call
    truncate_inode_pages() on their own. OCFS2 wants this so it can query the
    cluster before making a final decision on whether to wipe an inode from
    disk or not. In some corner cases an inode marked on the local node via
    voting may not actually get orphaned. A good example is node death before
    the transaction moving the inode to the orphan dir commits to the journal.
    Without this patch, the truncate_inode_pages() call in
    generic_delete_inode() would discard valid data for such inodes.

    During earlier discussion in the 2.6.13 merge plan thread, Christoph
    Hellwig indicated that other file systems might also find this useful.

    IMHO, the best solution would be to just allow ->drop_inode() to do the
    cluster query but it seems that would require a substantial reworking of
    that section of the code. Assuming it is safe to call write_inode_now() in
    ocfs2_delete_inode() for those inodes which won't actually get wiped, this
    solution should get us by for now.

    Trivial testing of this patch (and a related OCFS2 update) has shown this
    to avoid the corruption I'm seeing.

    Signed-off-by: Mark Fasheh
    Acked-by: Christoph Hellwig
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Mark Fasheh
     
  • Looks like the help comment for MPC834x got merged incorrectly.

    Signed-off-by: Kumar Gala
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Kumar Gala
     
  • Fix a typo involving CONFIG_ACPI_SRAT.

    Signed-off-by: Magnus Damm
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Magnus Damm
     
  • An oversight. We don't want to carry the IO scheduler's "we hold exclusive fs
    resources" hint over to the child across fork().

    Acked-by: Jens Axboe
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Giancarlo Formicuccia
     
  • Remove the weird and apparently unnecessary logic in MP_processor_info() which
    assumes that the BSP is the first one to run MP_processor_info(). On one of
    my boxes that isn't true and cpu_possible_map gets the wrong value.

    Cc: Zwane Mwaikambo
    Cc: Alexander Nyberg
    Signed-off-by: Andrew Morton
    Signed-off-by: Linus Torvalds

    Andrew Morton
     
  • This makes ACPI_BLACKLIST_YEAR be consistently defined when ACPI is
    enabled, regardless of whether we're on x86 or not, and thus avoids
    bogus -Wundef warnings on ia64.

    Signed-off-by: Linus Torvalds

    viro@ZenIV.linux.org.uk
     
  • Linus Torvalds
     
  • The legacy PIC's name is "i8259".

    Signed-off-by: Karsten Wiese
    Signed-off-by: Vojtech Pavlik
    Signed-off-by: Linus Torvalds

    Karsten Wiese
     
  • Signed-off-by: Al Viro
    Signed-off-by: Linus Torvalds

    viro@ZenIV.linux.org.uk
     
  • Signed-off-by: Al Viro
    Signed-off-by: Linus Torvalds

    viro@ZenIV.linux.org.uk
     
  • Passes -m64 to sparse on uml/amd64, tells sparse to stay out of
    USER_OBJS.

    Signed-off-by: Al Viro
    Signed-off-by: Linus Torvalds

    viro@ZenIV.linux.org.uk
     
  • Removed gratuitous includes of asm/serial.h in synklinkmp and ip2main.
    Allows to remove the rest of "broken on sparc32" in drivers/char - this
    stuff doesn't break the build anymore. Since it got zero testing, it almost
    certainly won't work there, though...

    Signed-off-by: Al Viro
    Acked-by: Russell King
    Signed-off-by: Linus Torvalds

    viro@ZenIV.linux.org.uk
     
  • Signed-off-by: Al Viro
    Signed-off-by: Linus Torvalds

    viro@ZenIV.linux.org.uk
     
  • void * is not the same as void *...
    Signed-off-by: Al Viro
    Signed-off-by: Linus Torvalds

    viro@ZenIV.linux.org.uk
     
  • Signed-off-by: Al Viro
    Signed-off-by: Linus Torvalds

    viro@ZenIV.linux.org.uk
     
  • Previous INTx cleanup patch had a bug that was not caught. I found
    this last night during testing and can confirm that it is now 100%
    working.

    Signed-off-by: Brett Russ
    Signed-off-by: Greg Kroah-Hartman
    Acked-by: Jeff Garzik
    Signed-off-by: Linus Torvalds

    Brett M Russ
     

09 Sep, 2005

20 commits