Subject: selinux: fix labeling of /proc/net inodes
Message-ID: <Xine.LNX.4.64.0801261602360.32278@us.intercode.com.au>
+From: Stephen Smalley <sds@tycho.nsa.gov>
+
patch b1aa5301b9f88a4891061650c591fb8fe1c1d1da in mainline.
The proc net rewrite had a side effect on selinux, leading it to mislabel
Cc: mel@csn.ul.ie, olaf@aepfle.de, torvalds@linux-foundation.org, clameter@sgi.com
Subject: slab: fix bootstrap on memoryless node
+From: Pekka J Enberg <penberg@cs.helsinki.fi>
+
[ Upstream commit: 556a169dab38b5100df6f4a45b655dddd3db94c1 ]
If the node we're booting on doesn't have memory, bootstrapping kmalloc()
Date: Sat, 2 Feb 2008 03:08:53 +0100
Subject: vm audit: add VM_DONTEXPAND to mmap for drivers that need it (CVE-2008-0007)
+From: Nick Piggin <npiggin@suse.de>
+
Drivers that register a ->fault handler, but do not range-check the
offset argument, must set VM_DONTEXPAND in the vm_flags in order to
prevent an expanding mremap from overflowing the resource.