Stephen Smalley 19cfa00990 selinux: prune /sys/fs/selinux/disable ...

Commit f22f9aaf6c ("selinux: remove the runtime disable
functionality") removed the underlying SELinux runtime disable
functionality but left everything else intact and started logging an
error message to warn any residual users.

Prune it to just log an error message once and to return count
(i.e. all bytes written successfully) to avoid breaking
userspace. This also fixes a local DoS from logspam.

Cc: stable@vger.kernel.org
Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2026-05-05 15:27:43 -04:00

..

apparmor

Merge tag 'apparmor-pr-2026-04-23' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2026-04-24 09:22:21 -07:00

bpf

lsm: replace the name field with a pointer to the lsm_id struct

2025-10-22 19:24:18 -04:00

integrity

Merge tag 'integrity-v7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2026-04-17 15:42:01 -07:00

ipe

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

keys

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

landlock

landlock: Clarify BUILD_BUG_ON check in scoping logic

2026-04-07 18:51:07 +02:00

loadpin

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

lockdown

lockdown: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

safesetid

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

selinux

selinux: prune /sys/fs/selinux/disable

2026-05-05 15:27:43 -04:00

smack

Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2026-04-14 18:36:10 -07:00

tomoyo

tomoyo: use u64 for holding inode->i_ino value

2026-04-15 00:00:10 +09:00

yama

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

commoncap_test.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

commoncap.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

device_cgroup.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

inode.c

securityfs: use kstrdup_const() to manage symlink targets

2026-03-17 17:13:36 -04:00

Kconfig

proc: make PROC_MEM_FORCE_PTRACE the Kconfig default

2026-04-13 09:12:37 -07:00

Kconfig.hardening

rust: add bitmap API.

2025-09-22 15:52:44 -04:00

lsm_audit.c

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

lsm_init.c

lsm: add backing_file LSM hooks

2026-04-03 16:53:50 -04:00

lsm_notifier.c

lsm: split the notifier code out into lsm_notifier.c

2025-10-22 19:24:15 -04:00

lsm_syscalls.c

lsm: rework lsm_active_cnt and lsm_idlist[]

2025-10-22 19:24:19 -04:00

lsm.h

lsm: add backing_file LSM hooks

2026-04-03 16:53:50 -04:00

Makefile

lsm: split the init code out into lsm_init.c

2025-10-22 19:24:16 -04:00

min_addr.c

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

2026-01-29 13:56:53 -05:00

security.c

Merge tag 'landlock-7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

2026-04-13 15:42:19 -07:00