# git rev-parse -q --verify f91e654474d413201ae578820fb63f8a811f6c4e^{commit} f91e654474d413201ae578820fb63f8a811f6c4e already have revision, skipping fetch # git checkout -q -f -B kisskb f91e654474d413201ae578820fb63f8a811f6c4e # git clean -qxdf # < git log -1 # commit f91e654474d413201ae578820fb63f8a811f6c4e # Merge: c715ebe 3dd0f18 # Author: Linus Torvalds # Date: Wed Aug 15 22:54:12 2018 -0700 # # Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security # # Pull integrity updates from James Morris: # "This adds support for EVM signatures based on larger digests, contains # a new audit record AUDIT_INTEGRITY_POLICY_RULE to differentiate the # IMA policy rules from the IMA-audit messages, addresses two deadlocks # due to either loading or searching for crypto algorithms, and cleans # up the audit messages" # # * 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: # EVM: fix return value check in evm_write_xattrs() # integrity: prevent deadlock during digsig verification. # evm: Allow non-SHA1 digital signatures # evm: Don't deadlock if a crypto algorithm is unavailable # integrity: silence warning when CONFIG_SECURITYFS is not enabled # ima: Differentiate auditing policy rules from "audit" actions # ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set # ima: Use audit_log_format() rather than audit_log_string() # ima: Call audit_log_string() rather than logging it untrusted # < /opt/cross/kisskb/fe-x86-64-core-i7-2017.05/bin/x86_64-linux-gcc --version # < git log --format=%s --max-count=1 f91e654474d413201ae578820fb63f8a811f6c4e # < make -s -j 120 ARCH=x86_64 O=/kisskb/build/linus-rand_x86_64-randconfig_um-x86_64 CROSS_COMPILE=/opt/cross/kisskb/fe-x86-64-core-i7-2017.05/bin/x86_64-linux- randconfig KCONFIG_SEED=0x2CFB1DA8 # Added to kconfig CONFIG_STANDALONE=y # Added to kconfig CONFIG_PREVENT_FIRMWARE_BUILD=y # Added to kconfig CONFIG_CC_STACKPROTECTOR_STRONG=n # Added to kconfig CONFIG_GCC_PLUGINS=n # Added to kconfig CONFIG_GCC_PLUGIN_CYC_COMPLEXITY=n # Added to kconfig CONFIG_GCC_PLUGIN_SANCOV=n # Added to kconfig CONFIG_GCC_PLUGIN_LATENT_ENTROPY=n # make -s -j 120 ARCH=x86_64 O=/kisskb/build/linus-rand_x86_64-randconfig_um-x86_64 CROSS_COMPILE=/opt/cross/kisskb/fe-x86-64-core-i7-2017.05/bin/x86_64-linux- olddefconfig # make -s -j 120 ARCH=x86_64 O=/kisskb/build/linus-rand_x86_64-randconfig_um-x86_64 CROSS_COMPILE=/opt/cross/kisskb/fe-x86-64-core-i7-2017.05/bin/x86_64-linux- /kisskb/src/kernel/sched/core.c: In function 'update_rq_clock_task': /kisskb/src/kernel/sched/core.c:139:6: warning: unused variable 'steal' [-Wunused-variable] s64 steal = 0, irq_delta = 0; ^ /kisskb/src/kernel/sched/core.c: In function 'update_rq_clock_task': /kisskb/src/kernel/sched/core.c:139:6: warning: unused variable 'steal' [-Wunused-variable] s64 steal = 0, irq_delta = 0; ^ Completed OK # rm -rf /kisskb/build/linus-rand_x86_64-randconfig_um-x86_64 # Build took: 0:01:26.383833