Linux 6.11 Released
18 Sep 2024 tags: audit lsm selinuxLinux v6.11 was released on Sunday, September 15th. I already wrote up a post highlighting the LSM, SELinux, and audit changes that were submitted during the merge window, however there were additional changes that went in during the release candidate process which are described below.
SELinux
-
Fix a problem where SELinux would mistakenly enforce the
process:execheappermission check on systems without an established heap when a memory mapping was created that touched the expected, but non-existent, heap region. -
Fix a problem where it was possible for NFS clients to change the SELinux security labels on files located on a NFS filesystem when root squashing is enabled.
-
Fix problems relating to how SELinux’s extended access vector rules, “xperms”, were not properly cached in the Access Vector Cache (AVC).
In addition to my highlights, LWN.net provides a nice overall summary of the kernel changes made during the first and second weeks of the merge window.