Commit 777f8171602d for kernel

commit 777f8171602d5954cac024b66afa1b5b030641a4
Merge: 204a920f284e 738c9738e690
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Dec 3 11:08:03 2025 -0800

    Merge tag 'integrity-v6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

    Pull integrity updates from Mimi Zohar:
     "Bug fixes:

       - defer credentials checking from the bprm_check_security hook to the
         bprm_creds_from_file security hook

       - properly ignore IMA policy rules based on undefined SELinux labels

      IMA policy rule extensions:

       - extend IMA to limit including file hashes in the audit logs
         (dont_audit action)

       - define a new filesystem subtype policy option (fs_subtype)

      Misc:

       - extend IMA to support in-kernel module decompression by deferring
         the IMA signature verification in kernel_read_file() to after the
         kernel module is decompressed"

    * tag 'integrity-v6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity:
      ima: Handle error code returned by ima_filter_rule_match()
      ima: Access decompressed kernel module to verify appended signature
      ima: add fs_subtype condition for distinguishing FUSE instances
      ima: add dont_audit action to suppress audit actions
      ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook