This is an automated email from the git hooks/post-receive script.
unknown user pushed a change to branch master in repository linux.
from 3f9f0252130e Merge tag 'random-6.19-rc1-for-linus' of git://git.kernel. [...] new 82d7a9da6e5b dt-bindings: thermal: qcom-tsens: Remove invalid tab character new 812f223fe9be tools/nolibc: handle NULL wstatus argument to waitpid() new 2602949b2233 tools/nolibc: x86: fix section mismatch caused by asm "mem [...] new 089c0a9853ae tools/nolibc: remove outdated comment about __sysret() in mmap() new c485ca3aff24 tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERR [...] new 4ada5679f18d tools/nolibc/dirent: avoid errno in readdir_r new fbd1b7f6b322 tools/nolibc: implement %m if errno is not defined new 2cb6cc8361da tools/nolibc: use __fallthrough__ rather than fallthrough new 3d66c4e14fbf tools/nolibc: add option to disable runtime new 4bb30188c787 tools/nolibc: add uio.h with readv and writev new 09c873c91fc1 tools/nolibc: fix misleading help message regarding instal [...] new db75042e93cf tools/nolibc: add missing memchr() to string.h new 10f407c66061 tools/nolibc: provide the portable sys/select.h new 44bf8bbe29fd tools/nolibc: add the more portable inttypes.h new 1868c027b652 tools/nolibc: make the "headers" target install all suppor [...] new 7534b9bfe691 tools/nolibc: clean up outdated comments in generic arch.h new 107eb8336e87 tools/nolibc: add support for fchdir() new 2d8482959efe tools/nolibc: avoid using plain integer as NULL pointer new 87506e44cb85 tools/nolibc: use 64-bit ino_t new d93d0593dd65 tools/nolibc: handle 64-bit off_t for llseek new 19c5a681b226 tools/nolibc: prefer the llseek syscall new e800e9446867 tools/nolibc: use 64-bit off_t new 3e1da545db4c tools/nolibc: remove now superfluous overflow check in llseek new 31b4d3af63f9 tools/nolibc: remove more __nolibc_enosys() fallbacks new 682bf67529fd selftests/nolibc: use lld to link loongarch binaries new 1d573464749c selftests/nolibc: error out on linker warnings new f2310b6271dc Merge tag 'nolibc-20251130-for-6.19-1' of git://git.kernel [...] new 58b46219bfcf keys: Remove redundant less-than-zero checks new a0a76e3f8d9a keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok new 8c8e3df3d2f5 keys: Fix grammar and formatting in 'struct key_type' comments new b082c4b06056 Merge tag 'keys-next-6.19-rc1' of git://git.kernel.org/pub [...] new 127fa2ae9e2b KEYS: trusted: Replace a redundant instance of tpm2_hash_map new 62cd5d480b97 KEYS: trusted: Fix a memory leak in tpm2_load_cmd new 7fc2cd2e4b39 Merge tag 'keys-trusted-next-rc1' of git://git.kernel.org/ [...] new a5e7c17c8100 lsm: split the notifier code out into lsm_notifier.c new 67a4b6a89b99 lsm: split the init code out into lsm_init.c new e02578561d47 lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_ [...] new 37f788f65528 lsm: introduce looping macros for the initialization code new cb1513db7a6e lsm: integrate report_lsm_order() code into caller new 92ed3500c9a9 lsm: integrate lsm_early_cred() and lsm_early_task() into caller new faabedcd6e88 lsm: rename ordered_lsm_init() to lsm_init_ordered() new 9f9dc69e06ec lsm: replace the name field with a pointer to the lsm_id struct new 592b104f9b51 lsm: rename the lsm order variables for consistency new 250898ca335f lsm: rework lsm_active_cnt and lsm_idlist[] new 935d508d4d7a lsm: get rid of the lsm_names list and do some cleanup new 2d67172612fd lsm: rework the LSM enable/disable setter/getter functions new a748372a282a lsm: rename exists_ordered_lsm() to lsm_order_exists() new 24a9c58978ee lsm: rename/rework append_ordered_lsm() into lsm_order_append() new 752db0657181 lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() new 291271e69174 lsm: cleanup the LSM blob size code new 27be5600fe85 lsm: cleanup initialize_lsm() and rename to lsm_init_single() new 45a41d1394aa lsm: fold lsm_init_ordered() into security_init() new 450705334f69 lsm: add/tweak function header comment blocks in lsm_init.c new 5137e583ba26 lsm: cleanup the debug and console output in lsm_init.c new ac3c47cece27 lsm: output available LSMs when debugging new 3423c6397ce2 lsm: group lsm_order_parse() with the other lsm_order_*() [...] new cdc028812f72 lsm: introduce an initcall mechanism into the LSM framework new b0374e79a83c loadpin: move initcalls to the LSM framework new d934f97db827 ipe: move initcalls to the LSM framework new 06643d5584f9 smack: move initcalls to the LSM framework new 9484ae129593 tomoyo: move initcalls to the LSM framework new d3ba8f80894a safesetid: move initcalls to the LSM framework new 7cbe11353751 apparmor: move initcalls to the LSM framework new 77ebff0607c5 lockdown: move initcalls to the LSM framework new 82fe7932e84f ima,evm: move initcalls to the LSM framework new 3156bc814f21 selinux: move initcalls to the LSM framework new 4ab5efcc2829 lsm: consolidate all of the LSM framework initcalls new dfa024bc3f67 lsm: add a LSM_STARTED_ALL notification event new 0e6ebf877843 device_cgroup: Refactor devcgroup_seq_show to use seq_put* [...] new 9a948eefad59 lsm: use unrcu_pointer() for current->cred in security_init() new 121cc35cfb55 Merge tag 'lsm-pr-20251201' of git://git.kernel.org/pub/sc [...] new 094e94d13b60 memfd,selinux: call security_inode_init_security_anon() new 641e02175861 selinux: Introduce a new config to make avc cache slot siz [...] new 929126ef4a0e selinux: Move avtab_hash() to a shared location for future reuse new 20d387d7ceab selinux: improve bucket distribution uniformity of avc_hash() new 51e3b98d737a Merge tag 'selinux-pr-20251201' of git://git.kernel.org/pu [...] new 4f7b54e17edd audit: fix comment misindentation in audit.h new 77563f3d4704 audit: Use kzalloc() instead of kmalloc()/memset() in audi [...] new c8a3dfe73159 audit: merge loops in __audit_inode_child() new 0eae3283c302 Merge tag 'audit-pr-20251201' of git://git.kernel.org/pub/ [...] new 635a01da8385 smack: deduplicate "does access rule request transmutation" new 195da3ff244d smack: fix bug: SMACK64TRANSMUTE set on non-directory new 8e5d9f916a96 smack: deduplicate xattr setting in smack_inode_init_security() new 69204f6cdb90 smack: always "instantiate" inode in smack_inode_init_security() new 78fc6a94be25 smack: fix bug: invalid label of unix socket file new c147e13ea7fe smack: fix bug: unprivileged task can create labels new 674e2b24791c smack: fix bug: setting task label silently ignores input garbage new 6ddd169d0288 smack: fix kernel-doc warnings for smk_import_valid_label() new 29c701f90b93 Smack: function parameter 'gfp' not described new 204a920f284e Merge tag 'Smack-for-6.19' of https://github.com/cschaufle [...] new 8f3fc4f3f8aa ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook new 345123d650db ima: add dont_audit action to suppress audit actions new 43369273518f ima: add fs_subtype condition for distinguishing FUSE instances new c200892b46ba ima: Access decompressed kernel module to verify appended [...] new 738c9738e690 ima: Handle error code returned by ima_filter_rule_match() new 777f8171602d Merge tag 'integrity-v6.19' of git://git.kernel.org/pub/sc [...] new 864468ae3099 ipe: Drop a duplicated CONFIG_ prefix in the ifdeffery new 67678189e492 ipe: Add AT_EXECVE_CHECK support for script enforcement new d7ba853c0e47 ipe: Update documentation for script enforcement new c8321831480d Merge tag 'ipe-pr-20251202' of git://git.kernel.org/pub/sc [...] new 6c4fed5fee42 crypto: drbg - Export CTR DRBG DF functions new ba0570bdf1d9 crypto: drbg - Replace AES cipher calls with library calls new 1a098379f28b crypto: xilinx-trng - Add CTR_DRBG DF processing of seed new 33eea63ff9c6 crypto: fips - replace simple_strtol with kstrtoint to imp [...] new 6af9914f7bbf crypto: hifn_795x - replace simple_strtoul with kstrtouint new 59682835e134 dt-bindings: rng: microchip,pic32-rng: convert to DT schema new 7cf6e0b69b0d crypto: caam - Add check for kcalloc() in test_len() new e74b96d77da9 hwrng: core - Allow runtime disabling of the HW RNG new 6f6e309328d5 crypto: af_alg - zero initialize memory allocated via sock [...] new 96feb73def02 crypto: authenc - Correctly pass EINPROGRESS back up to th [...] new 1617d93c12f1 crypto: drbg - make drbg_{ctr_bcc,kcapi_sym}() return *void* new 4f3b5f9edc86 dt-bindings: crypto: qcom,inline-crypto-engine: Document t [...] new 38f6880759fd docs: trusted-encrypted: trusted-keys as protected keys new a703a4c2a328 KEYS: trusted: caam based protected key new 66b9a095f7f9 crypto: caam - Add support of paes algorithm new 9b04d8f00569 crypto: aead - Fix reqsize handling new aa653654ee67 rhashtable: use likely for rhashtable lookup new 77cd92102715 docs: trusted-encrypted: fix htmldocs build error new df0845cf447a crypto: asymmetric_keys - prevent overflow in asymmetric_k [...] new 7fc25ed2bc35 crypto: sun8i-ss - Move j init earlier in sun8i_ss_hash_run new e7066160f5b4 crypto: hisilicon/qm - restore original qos values new 275a9a3f9b6a KEYS: trusted: Pass argument by pointer in dump_options new 85e1a7ec61d9 crypto: aead - Add support for on-stack AEAD req allocation new 4fbfd7b206b1 crypto: ti - Add support for AES-XTS in DTHEv2 driver new 841940df6f6e dt-bindings: crypto: amd,ccp-seattle-v1a: Allow 'iommus' property new 12ad5b2346f9 keys: Annotate struct asymmetric_key_id with __counted_by new f5e297a112fa crypto: qce - Provide dev_err_probe() status on DMA failure new f5a332980a68 crypto: hisilicon/qm - add the save operation of eqe and aeqe new 1b5645e45461 crypto: hisilicon/qm - add concurrency protection for vari [...] new 51996331f713 crypto: hisilicon/sgl - remove unnecessary checks for curr [...] new d91249474783 crypto: hisilicon/qm - add missing default in switch in qm [...] new d5b59ec33c5b crypto: qat - use simple_strtoull to improve qat_uclo_parse_num new 426b1a1bdfce crypto: xilinx - Use %pe to print PTR_ERR new e74a03e51906 dt-bindings: crypto: qcom,prng: Document kaanapali RNG new 5a331d1cd550 dt-bindings: crypto: qcom-qce: Document the kaanapli crypt [...] new 457be301fc6f crypto: qce - fix version check new 9fc629011725 crypto: ccp - Add support for PCI device 0x115A new b6410c1e5016 crypto: deflate - Use struct_size to improve deflate_alloc_stream new d633730bb387 crypto: octeontx2 - Replace deprecated strcpy in cpt_ucode [...] new d52e9b884374 crypto: rockchip - drop redundant crypto_skcipher_ivsize() calls new 5f8c6c931827 crypto: atmel-i2c - add WQ_PERCPU to alloc_workqueue users new 7e8f232ae8d7 crypto: cavium/nitrox - add WQ_PERCPU to alloc_workqueue users new cdd7bbce7b50 hwrng: bcm2835 - Move MODULE_DEVICE_TABLE() to table definition new 6b94eb68ad21 hwrng: bcm2835 - Simplify with of_device_get_match_data() new c6c247ae336a crypto: artpec6 - Simplify with of_device_get_match_data() new ec2054c1244c crypto: ccp - Constify 'dev_vdata' member new 4ae946a45dcd crypto: ccp - Simplify with of_device_get_match_data() new 054c7f7ad323 crypto: cesa - Simplify with of_device_get_match_data() new 06c489ce5b50 crypto: qat - add WQ_PERCPU to alloc_workqueue users new af3852cda347 padata: remove __padata_list_init() new 6cf32607555d crypto: zstd - Annotate struct zstd_ctx with __counted_by new 2236fc007a78 crypto: zstd - Remove unnecessary size_t cast new 76ce17f6f7f7 crypto: iaa - Fix incorrect return value in save_iaa_wq() new e9eb52037a52 crypto: starfive - Correctly handle return of sg_nents_for_len new 8700ce07c5c6 crypto: ccree - Correctly handle return of sg_nents_for_len new a26c23e0d679 KEYS: Avoid -Wflex-array-member-not-at-end warning new 79492d5adf45 crypto: asymmetric_keys - fix uninitialized pointers with [...] new c7dcb041ce7d crypto: ansi_cprng - Remove unused ansi_cprng algorithm new bfc11a84e08c crypto: tcrypt - Remove unused poly1305 support new 5727a844a3f7 crypto: iaa - Request to add Kanchana P Sridhar to Maintainers. new 4dffc9bbffb9 crypto: scatterwalk - Fix memcpy_sglist() to always succeed new 20d868a77f11 Revert "crypto: scatterwalk - Move skcipher walk and use i [...] new c637f3e4a59d crypto: testmgr - Add missing DES weak and semi-weak key tests new 680cd3e28c62 crypto: drbg - Delete unused ctx from struct sdesc new 6c5d5b6dc5eb crypto: aesni - ctr_crypt() use min() instead of min_t() new 0f8ead58b6dc hwrng: core - use min3() instead of nested min_t() new 14ca8ce1fcbb crypto: ccp - use min() instead of min_t() new 80b61046b689 crypto: lib/mpi - use min() instead of min_t() new b0356b75f42f crypto: ahash - Fix crypto_ahash_import with partial block data new ebbdf6466b30 crypto: ahash - Zero positive err value in ahash_update_finish new 48bc9da3c97c crypto: zstd - fix double-free in per-CPU stream cleanup new a619fe35ab41 Merge tag 'v6.19-p1' of git://git.kernel.org/pub/scm/linux [...]
The 172 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference.
Summary of changes: Documentation/ABI/testing/ima_policy | 3 +- Documentation/admin-guide/LSM/Smack.rst | 16 +- Documentation/admin-guide/LSM/ipe.rst | 17 +- Documentation/crypto/userspace-if.rst | 7 +- .../bindings/crypto/amd,ccp-seattle-v1a.yaml | 3 + .../bindings/crypto/qcom,inline-crypto-engine.yaml | 1 + .../devicetree/bindings/crypto/qcom,prng.yaml | 1 + .../devicetree/bindings/crypto/qcom-qce.yaml | 1 + .../bindings/rng/microchip,pic32-rng.txt | 17 - .../bindings/rng/microchip,pic32-rng.yaml | 40 ++ .../devicetree/bindings/thermal/qcom-tsens.yaml | 2 +- Documentation/security/keys/trusted-encrypted.rst | 88 ++- MAINTAINERS | 2 +- arch/arm/configs/axm55xx_defconfig | 1 - arch/arm/configs/clps711x_defconfig | 1 - arch/arm/configs/dove_defconfig | 1 - arch/arm/configs/ep93xx_defconfig | 1 - arch/arm/configs/jornada720_defconfig | 1 - arch/arm/configs/keystone_defconfig | 1 - arch/arm/configs/lpc32xx_defconfig | 1 - arch/arm/configs/mmp2_defconfig | 1 - arch/arm/configs/mv78xx0_defconfig | 1 - arch/arm/configs/omap1_defconfig | 1 - arch/arm/configs/orion5x_defconfig | 1 - arch/arm/configs/pxa168_defconfig | 1 - arch/arm/configs/pxa3xx_defconfig | 1 - arch/arm/configs/pxa910_defconfig | 1 - arch/arm/configs/spitz_defconfig | 1 - arch/arm64/configs/defconfig | 1 - arch/hexagon/configs/comet_defconfig | 1 - arch/m68k/configs/amcore_defconfig | 1 - arch/m68k/configs/amiga_defconfig | 1 - arch/m68k/configs/apollo_defconfig | 1 - arch/m68k/configs/atari_defconfig | 1 - arch/m68k/configs/bvme6000_defconfig | 1 - arch/m68k/configs/hp300_defconfig | 1 - arch/m68k/configs/mac_defconfig | 1 - arch/m68k/configs/multi_defconfig | 1 - arch/m68k/configs/mvme147_defconfig | 1 - arch/m68k/configs/mvme16x_defconfig | 1 - arch/m68k/configs/q40_defconfig | 1 - arch/m68k/configs/stmark2_defconfig | 1 - arch/m68k/configs/sun3_defconfig | 1 - arch/m68k/configs/sun3x_defconfig | 1 - arch/mips/configs/decstation_64_defconfig | 1 - arch/mips/configs/decstation_defconfig | 1 - arch/mips/configs/decstation_r4k_defconfig | 1 - arch/s390/configs/debug_defconfig | 1 - arch/s390/configs/defconfig | 1 - arch/sh/configs/ap325rxa_defconfig | 1 - arch/sh/configs/apsh4a3a_defconfig | 1 - arch/sh/configs/apsh4ad0a_defconfig | 1 - arch/sh/configs/dreamcast_defconfig | 1 - arch/sh/configs/ecovec24_defconfig | 1 - arch/sh/configs/edosk7760_defconfig | 1 - arch/sh/configs/espt_defconfig | 1 - arch/sh/configs/hp6xx_defconfig | 1 - arch/sh/configs/landisk_defconfig | 1 - arch/sh/configs/lboxre2_defconfig | 1 - arch/sh/configs/migor_defconfig | 1 - arch/sh/configs/r7780mp_defconfig | 1 - arch/sh/configs/r7785rp_defconfig | 1 - arch/sh/configs/rts7751r2d1_defconfig | 1 - arch/sh/configs/rts7751r2dplus_defconfig | 1 - arch/sh/configs/sdk7780_defconfig | 1 - arch/sh/configs/sdk7786_defconfig | 1 - arch/sh/configs/se7206_defconfig | 1 - arch/sh/configs/se7343_defconfig | 1 - arch/sh/configs/se7705_defconfig | 1 - arch/sh/configs/se7712_defconfig | 1 - arch/sh/configs/se7721_defconfig | 1 - arch/sh/configs/se7722_defconfig | 1 - arch/sh/configs/se7724_defconfig | 1 - arch/sh/configs/se7750_defconfig | 1 - arch/sh/configs/se7751_defconfig | 1 - arch/sh/configs/se7780_defconfig | 1 - arch/sh/configs/sh03_defconfig | 1 - arch/sh/configs/sh2007_defconfig | 1 - arch/sh/configs/sh7710voipgw_defconfig | 1 - arch/sh/configs/sh7757lcr_defconfig | 1 - arch/sh/configs/sh7763rdp_defconfig | 1 - arch/sh/configs/sh7785lcr_32bit_defconfig | 1 - arch/sh/configs/sh7785lcr_defconfig | 1 - arch/sh/configs/shmin_defconfig | 1 - arch/sh/configs/shx3_defconfig | 1 - arch/sh/configs/titan_defconfig | 1 - arch/sh/configs/ul2_defconfig | 1 - arch/sh/configs/urquell_defconfig | 1 - arch/sparc/configs/sparc32_defconfig | 1 - arch/sparc/configs/sparc64_defconfig | 1 - arch/x86/crypto/aesni-intel_glue.c | 3 +- arch/xtensa/configs/audio_kc705_defconfig | 1 - arch/xtensa/configs/generic_kc705_defconfig | 1 - arch/xtensa/configs/iss_defconfig | 1 - arch/xtensa/configs/nommu_kc705_defconfig | 1 - arch/xtensa/configs/smp_lx200_defconfig | 1 - arch/xtensa/configs/virt_defconfig | 1 - arch/xtensa/configs/xip_kc705_defconfig | 1 - crypto/Kconfig | 21 +- crypto/Makefile | 3 +- crypto/aead.c | 20 + crypto/af_alg.c | 5 +- crypto/ahash.c | 18 +- crypto/algif_hash.c | 3 +- crypto/algif_rng.c | 3 +- crypto/ansi_cprng.c | 474 ---------------- crypto/asymmetric_keys/asymmetric_type.c | 14 +- crypto/asymmetric_keys/restrict.c | 7 +- crypto/asymmetric_keys/x509_cert_parser.c | 2 +- crypto/asymmetric_keys/x509_public_key.c | 2 +- crypto/authenc.c | 75 ++- crypto/deflate.c | 3 +- crypto/df_sp80090a.c | 232 ++++++++ crypto/drbg.c | 266 +-------- crypto/fips.c | 5 +- crypto/scatterwalk.c | 345 +++--------- crypto/skcipher.c | 261 ++++++++- crypto/tcrypt.c | 8 - crypto/tcrypt.h | 18 - crypto/testmgr.c | 97 ---- crypto/testmgr.h | 226 ++++---- crypto/zstd.c | 17 +- drivers/char/hw_random/bcm2835-rng.c | 11 +- drivers/char/hw_random/core.c | 11 +- drivers/char/tpm/tpm2-cmd.c | 14 +- drivers/crypto/Kconfig | 1 + drivers/crypto/allwinner/sun8i-ss/sun8i-ss-hash.c | 2 +- drivers/crypto/atmel-i2c.c | 2 +- drivers/crypto/axis/artpec6_crypto.c | 9 +- drivers/crypto/caam/blob_gen.c | 86 ++- drivers/crypto/caam/caamalg.c | 128 ++++- drivers/crypto/caam/caamalg_desc.c | 87 ++- drivers/crypto/caam/caamalg_desc.h | 13 +- drivers/crypto/caam/caamrng.c | 4 +- drivers/crypto/caam/desc.h | 9 +- drivers/crypto/caam/desc_constr.h | 8 +- drivers/crypto/cavium/nitrox/nitrox_mbx.c | 2 +- drivers/crypto/ccp/ccp-dev.c | 2 +- drivers/crypto/ccp/sp-dev.h | 2 +- drivers/crypto/ccp/sp-pci.c | 19 + drivers/crypto/ccp/sp-platform.c | 17 +- drivers/crypto/ccree/cc_buffer_mgr.c | 6 +- drivers/crypto/hifn_795x.c | 7 +- drivers/crypto/hisilicon/qm.c | 55 +- drivers/crypto/hisilicon/sgl.c | 5 - drivers/crypto/intel/iaa/iaa_crypto_main.c | 2 +- drivers/crypto/intel/qat/qat_common/adf_aer.c | 4 +- drivers/crypto/intel/qat/qat_common/adf_isr.c | 3 +- drivers/crypto/intel/qat/qat_common/adf_sriov.c | 3 +- drivers/crypto/intel/qat/qat_common/adf_vf_isr.c | 3 +- drivers/crypto/intel/qat/qat_common/qat_uclo.c | 18 +- drivers/crypto/marvell/cesa/cesa.c | 7 +- .../crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 5 +- drivers/crypto/qce/core.c | 3 +- drivers/crypto/qce/dma.c | 6 +- drivers/crypto/rockchip/rk3288_crypto_skcipher.c | 3 +- drivers/crypto/starfive/jh7110-hash.c | 6 +- drivers/crypto/ti/Kconfig | 1 + drivers/crypto/ti/dthev2-aes.c | 137 ++++- drivers/crypto/ti/dthev2-common.h | 10 +- drivers/crypto/xilinx/xilinx-trng.c | 39 +- include/crypto/aead.h | 87 +++ include/crypto/algapi.h | 12 + include/crypto/df_sp80090a.h | 28 + include/crypto/drbg.h | 25 +- include/crypto/internal/drbg.h | 54 ++ include/crypto/internal/skcipher.h | 48 +- include/crypto/rng.h | 11 +- include/crypto/scatterwalk.h | 117 ++-- include/keys/asymmetric-type.h | 2 +- include/linux/kernel_read_file.h | 1 + include/linux/key-type.h | 9 +- include/linux/lsm_hooks.h | 73 ++- include/linux/memfd.h | 2 + include/linux/rhashtable.h | 70 ++- include/linux/security.h | 3 +- include/linux/tpm.h | 1 + include/soc/fsl/caam-blob.h | 26 + kernel/audit.h | 2 +- kernel/auditfilter.c | 3 +- kernel/auditsc.c | 43 +- kernel/module/main.c | 17 +- kernel/padata.c | 12 +- lib/crypto/mpi/mpicoder.c | 2 +- mm/memfd.c | 14 +- security/Makefile | 2 +- security/apparmor/apparmorfs.c | 4 +- security/apparmor/crypto.c | 3 +- security/apparmor/include/apparmorfs.h | 2 + security/apparmor/include/crypto.h | 1 + security/apparmor/lsm.c | 11 +- security/bpf/hooks.c | 2 +- security/commoncap.c | 2 +- security/device_cgroup.c | 56 +- security/inode.c | 46 +- security/integrity/evm/evm_main.c | 5 +- security/integrity/evm/evm_secfs.c | 11 +- security/integrity/iint.c | 14 +- security/integrity/ima/ima_fs.c | 11 +- security/integrity/ima/ima_main.c | 68 ++- security/integrity/ima/ima_policy.c | 62 +- security/integrity/integrity.h | 2 + security/ipe/audit.c | 1 + security/ipe/fs.c | 4 +- security/ipe/hooks.c | 30 +- security/ipe/hooks.h | 3 + security/ipe/ipe.c | 4 +- security/ipe/ipe.h | 2 + security/keys/big_key.c | 2 +- security/keys/encrypted-keys/ecryptfs_format.c | 3 +- security/keys/encrypted-keys/encrypted.c | 4 +- security/keys/trusted-keys/trusted_caam.c | 108 ++++ security/keys/trusted-keys/trusted_core.c | 4 +- security/keys/trusted-keys/trusted_tpm2.c | 29 +- security/keys/user_defined.c | 2 +- security/landlock/setup.c | 2 +- security/loadpin/loadpin.c | 13 +- security/lockdown/lockdown.c | 5 +- security/lsm.h | 58 ++ security/lsm_init.c | 564 +++++++++++++++++++ security/lsm_notifier.c | 31 + security/lsm_syscalls.c | 2 + security/min_addr.c | 5 +- security/safesetid/lsm.c | 3 +- security/safesetid/lsm.h | 2 + security/safesetid/securityfs.c | 3 +- security/security.c | 623 ++------------------- security/selinux/Kconfig | 11 + security/selinux/Makefile | 2 +- security/selinux/avc.c | 9 +- security/selinux/hooks.c | 42 +- security/selinux/ibpkey.c | 5 +- security/selinux/include/audit.h | 9 + security/selinux/include/classmap.h | 2 + security/selinux/include/hash.h | 47 ++ security/selinux/include/initcalls.h | 19 + security/selinux/include/policycap.h | 1 + security/selinux/include/policycap_names.h | 1 + security/selinux/include/security.h | 5 + security/selinux/initcalls.c | 52 ++ security/selinux/netif.c | 5 +- security/selinux/netlink.c | 5 +- security/selinux/netnode.c | 5 +- security/selinux/netport.c | 5 +- security/selinux/selinuxfs.c | 5 +- security/selinux/ss/avtab.c | 39 +- security/selinux/ss/services.c | 26 +- security/smack/smack.h | 17 + security/smack/smack_access.c | 96 +++- security/smack/smack_lsm.c | 290 ++++++---- security/smack/smack_netfilter.c | 4 +- security/smack/smackfs.c | 4 +- security/tomoyo/common.h | 2 + security/tomoyo/securityfs_if.c | 4 +- security/tomoyo/tomoyo.c | 3 +- security/yama/yama_lsm.c | 2 +- tools/include/nolibc/Makefile | 22 +- tools/include/nolibc/arch-arm.h | 2 + tools/include/nolibc/arch-arm64.h | 2 + tools/include/nolibc/arch-loongarch.h | 2 + tools/include/nolibc/arch-m68k.h | 2 + tools/include/nolibc/arch-mips.h | 2 + tools/include/nolibc/arch-powerpc.h | 2 + tools/include/nolibc/arch-riscv.h | 2 + tools/include/nolibc/arch-s390.h | 2 + tools/include/nolibc/arch-sh.h | 2 + tools/include/nolibc/arch-sparc.h | 2 + tools/include/nolibc/arch-x86.h | 10 +- tools/include/nolibc/arch.h | 9 - tools/include/nolibc/compiler.h | 4 +- tools/include/nolibc/crt.h | 3 + tools/include/nolibc/dirent.h | 6 +- tools/include/nolibc/getopt.h | 2 +- tools/include/nolibc/inttypes.h | 3 + tools/include/nolibc/nolibc.h | 2 + tools/include/nolibc/stackprotector.h | 2 + tools/include/nolibc/std.h | 4 +- tools/include/nolibc/stdio.h | 10 +- tools/include/nolibc/stdlib.h | 2 + tools/include/nolibc/string.h | 15 + tools/include/nolibc/sys.h | 74 +-- tools/include/nolibc/sys/auxv.h | 3 + tools/include/nolibc/sys/mman.h | 5 - tools/include/nolibc/sys/reboot.h | 2 +- tools/include/nolibc/sys/select.h | 103 ++++ tools/include/nolibc/sys/uio.h | 49 ++ tools/include/nolibc/sys/wait.h | 18 +- tools/include/nolibc/time.h | 16 +- tools/include/nolibc/types.h | 47 -- tools/include/nolibc/unistd.h | 6 +- tools/testing/selftests/nolibc/Makefile.nolibc | 1 + tools/testing/selftests/nolibc/nolibc-test.c | 13 + tools/testing/selftests/nolibc/run-tests.sh | 2 +- 293 files changed, 3955 insertions(+), 2846 deletions(-) delete mode 100644 Documentation/devicetree/bindings/rng/microchip,pic32-rng.txt create mode 100644 Documentation/devicetree/bindings/rng/microchip,pic32-rng.yaml delete mode 100644 crypto/ansi_cprng.c create mode 100644 crypto/df_sp80090a.c create mode 100644 include/crypto/df_sp80090a.h create mode 100644 include/crypto/internal/drbg.h create mode 100644 security/lsm.h create mode 100644 security/lsm_init.c create mode 100644 security/lsm_notifier.c create mode 100644 security/selinux/include/hash.h create mode 100644 security/selinux/include/initcalls.h create mode 100644 security/selinux/initcalls.c create mode 100644 tools/include/nolibc/inttypes.h create mode 100644 tools/include/nolibc/sys/select.h create mode 100644 tools/include/nolibc/sys/uio.h