The Wire · Showcase
LINUX MERGES INTEGRITY, SMACK, AND CHROME PLATFORM FIXES
By RepoJournal · Filed · About Linux
The kernel's latest release pulled in critical security fixes and platform updates that you need to know about before your next build.
Linus Torvalds merged the integrity-v7.3 tag [1], introducing CONFIG_IMA_INIT_LATE_SYNC to fix a TPM initialization race that could leave IMA in bypass mode. Security also gets a boost from the Smack pull [2], which fixes a credential use-after-free in smack_file_send_sigiotask and restricts smackfs values to 0-255. Chrome platform updates [3] address memory overreads in cros_ec_sensorhub and resource leaks in cros_ec_debugfs, plus a new post_power_on_delay_ms for Hana. The input subsystem gained an Imagis ISA1200 haptic driver and improved inhibit handling [4], while PWM updates include Rust cleanups and a new SoC variant [5]. Over on the Omarchy desktop, DNS provider switching now falls back to polkit when the sudoers grant is missing [6][8], fixing a one-click toggle that died with no terminal. The earlier sudo-safe grant [7] works, but only with the updated settings package. Omarchy also adds a remove menu for AI apps and a command to print the OEM Windows key from firmware [9]. With 59 commits and 8 PRs across the period, the kernel's integrity and Smack fixes take priority.
One email a day. Unsubscribe in one click.
Keep up with Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Enable CONFIG_IMA_INIT_LATE_SYNC if you use IMA with TPM-backed keys torvalds/linux [plan]
- → Review Smack UAF fix and apply to your security policy torvalds/linux [immediate]
- → Update omarchy-settings to get the DNS sudoers grant and avoid polkit fallback issues basecamp/omarchy [immediate]
- → Test omarchy windows key against your hardware before relying on it basecamp/omarchy [monitor]
References
- [1] Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity torvalds/linux
- [2] Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-next torvalds/linux
- [3] Merge tag 'chrome-platform-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/chrome-platform/linux torvalds/linux
- [4] Merge tag 'input-for-v7.3-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input torvalds/linux
- [5] Merge tag 'pwm/for-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/linux torvalds/linux
- [6] Fall back to polkit when the DNS sudoers grant is missing ↗ basecamp/omarchy
- [7] Switch DNS providers without a password prompt ↗ basecamp/omarchy
- [8] Fall back to polkit when the DNS sudoers grant is missing (#7492) basecamp/omarchy
- [9] Print the OEM Windows product key from firmware ↗ basecamp/omarchy