sst-linux/security
Konstantin Andreev d6937b1b4a smack: dont compile ipv6 code unless ipv6 is configured
[ Upstream commit bfcf4004bcbce2cb674b4e8dbd31ce0891766bac ]

I want to be sure that ipv6-specific code
is not compiled in kernel binaries
if ipv6 is not configured.

[1] was getting rid of "unused variable" warning, but,
with that, it also mandated compilation of a handful ipv6-
specific functions in ipv4-only kernel configurations:

smk_ipv6_localhost, smack_ipv6host_label, smk_ipv6_check.

Their compiled bodies are likely to be removed by compiler
from the resulting binary, but, to be on the safe side,
I remove them from the compiler view.

[1]
Fixes: 00720f0e7f ("smack: avoid unused 'sip' variable warning")

Signed-off-by: Konstantin Andreev <andreev@swemel.ru>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-04-10 14:33:30 +02:00
..
apparmor apparmor: test: Fix memory leak for aa_unpack_strdup() 2024-12-14 19:53:59 +01:00
bpf bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0 2024-10-17 15:21:27 +02:00
integrity ima: fix buffer overrun in ima_eventdigest_init_common 2024-11-22 15:37:31 +01:00
keys security/keys: fix slab-out-of-bounds in key_task_permission 2024-11-14 13:15:11 +01:00
landlock landlock: Handle weird files 2025-02-21 13:49:04 +01:00
loadpin
lockdown
safesetid safesetid: check size of policy writes 2025-02-21 13:49:31 +01:00
selinux selinux: ignore unknown extended permissions 2025-01-09 13:29:56 +01:00
smack smack: dont compile ipv6 code unless ipv6 is configured 2025-04-10 14:33:30 +02:00
tomoyo tomoyo: don't emit warning in tomoyo_write_control() 2025-02-21 13:49:31 +01:00
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig proc: add config & param to block forcing mem writes 2024-10-17 15:21:39 +02:00
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c ima: Avoid blocking in RCU read-side critical section 2024-07-11 12:47:16 +02:00