# git rev-parse -q --verify b1dba2473114588be3df916bf629a61bdcc83737^{commit}
b1dba2473114588be3df916bf629a61bdcc83737
already have revision, skipping fetch
# git checkout -q -f -B kisskb b1dba2473114588be3df916bf629a61bdcc83737
# git clean -qxdf
# < git log -1
# commit b1dba2473114588be3df916bf629a61bdcc83737
# Merge: 07e309a972ca 98aa00345de5
# Author: Linus Torvalds <torvalds@linux-foundation.org>
# Date:   Mon Jan 27 15:38:15 2020 -0800
# 
#     Merge tag 'selinux-pr-20200127' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
#     
#     Pull SELinux update from Paul Moore:
#      "This is one of the bigger SELinux pull requests in recent years with
#       28 patches. Everything is passing our test suite and the highlights
#       are below:
#     
#        - Mark CONFIG_SECURITY_SELINUX_DISABLE as deprecated. We're some time
#          away from actually attempting to remove this in the kernel, but the
#          only distro we know that still uses it (Fedora) is working on
#          moving away from this so we want to at least let people know we are
#          planning to remove it.
#     
#        - Reorder the SELinux hooks to help prevent bad things when SELinux
#          is disabled at runtime. The proper fix is to remove the
#          CONFIG_SECURITY_SELINUX_DISABLE functionality (see above) and just
#          take care of it at boot time (e.g. "selinux=0").
#     
#        - Add SELinux controls for the kernel lockdown functionality,
#          introducing a new SELinux class/permissions: "lockdown { integrity
#          confidentiality }".
#     
#        - Add a SELinux control for move_mount(2) that reuses the "file {
#          mounton }" permission.
#     
#        - Improvements to the SELinux security label data store lookup
#          functions to speed up translations between our internal label
#          representations and the visible string labels (both directions).
#     
#        - Revisit a previous fix related to SELinux inode auditing and
#          permission caching and do it correctly this time.
#     
#        - Fix the SELinux access decision cache to cleanup properly on error.
#          In some extreme cases this could limit the cache size and result in
#          a decrease in performance.
#     
#        - Enable SELinux per-file labeling for binderfs.
#     
#        - The SELinux initialized and disabled flags were wrapped with
#          accessors to ensure they are accessed correctly.
#     
#        - Mark several key SELinux structures with __randomize_layout.
#     
#        - Changes to the LSM build configuration to only build
#          security/lsm_audit.c when needed.
#     
#        - Changes to the SELinux build configuration to only build the IB
#          object cache when CONFIG_SECURITY_INFINIBAND is enabled.
#     
#        - Move a number of single-caller functions into their callers.
#     
#        - Documentation fixes (/selinux -> /sys/fs/selinux).
#     
#        - A handful of cleanup patches that aren't worth mentioning on their
#          own, the individual descriptions have plenty of detail"
#     
#     * tag 'selinux-pr-20200127' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux: (28 commits)
#       selinux: fix regression introduced by move_mount(2) syscall
#       selinux: do not allocate ancillary buffer on first load
#       selinux: remove redundant allocation and helper functions
#       selinux: remove redundant selinux_nlmsg_perm
#       selinux: fix wrong buffer types in policydb.c
#       selinux: reorder hooks to make runtime disable less broken
#       selinux: treat atomic flags more carefully
#       selinux: make default_noexec read-only after init
#       selinux: move ibpkeys code under CONFIG_SECURITY_INFINIBAND.
#       selinux: remove redundant msg_msg_alloc_security
#       Documentation,selinux: fix references to old selinuxfs mount point
#       selinux: deprecate disabling SELinux and runtime
#       selinux: allow per-file labelling for binderfs
#       selinuxfs: use scnprintf to get real length for inode
#       selinux: remove set but not used variable 'sidtab'
#       selinux: ensure the policy has been loaded before reading the sidtab stats
#       selinux: ensure we cleanup the internal AVC counters on error in avc_update()
#       selinux: randomize layout of key structures
#       selinux: clean up selinux_enabled/disabled/enforcing_boot
#       selinux: remove unnecessary selinux cred request
#       ...
# < /opt/cross/kisskb/korg/gcc-5.5.0-nolibc/powerpc64-linux/bin/powerpc64-linux-gcc --version
# < /opt/cross/kisskb/korg/gcc-5.5.0-nolibc/powerpc64-linux/bin/powerpc64-linux-ld --version
# < git log --format=%s --max-count=1 b1dba2473114588be3df916bf629a61bdcc83737
# < make -s -j 24 ARCH=powerpc O=/kisskb/build/linus_ppc64le_defconfig_ppc64le-gcc5 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-5.5.0-nolibc/powerpc64-linux/bin/powerpc64-linux-  ppc64le_defconfig
# make -s -j 24 ARCH=powerpc O=/kisskb/build/linus_ppc64le_defconfig_ppc64le-gcc5 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-5.5.0-nolibc/powerpc64-linux/bin/powerpc64-linux-  
WARNING: vmlinux.o(.text+0x31e4): Section mismatch in reference from the variable __boot_from_prom to the function .init.text:prom_init()
The function __boot_from_prom() references
the function __init prom_init().
This is often because __boot_from_prom lacks a __init 
annotation or the annotation of prom_init is wrong.

WARNING: vmlinux.o(.text+0x33c8): Section mismatch in reference from the variable start_here_common to the function .init.text:start_kernel()
The function start_here_common() references
the function __init start_kernel().
This is often because start_here_common lacks a __init 
annotation or the annotation of start_kernel is wrong.

WARNING: 2 bad relocations
c000000001637278 R_PPC64_ADDR64    _binary__btf_vmlinux_bin_start
c000000001637280 R_PPC64_ADDR64    _binary__btf_vmlinux_bin_end
Completed OK
# rm -rf /kisskb/build/linus_ppc64le_defconfig_ppc64le-gcc5
# Build took: 0:03:34.737773