Commit 331eadd85f14 for kernel

commit 331eadd85f14bac85663c14c99228f6dedf64d87
Merge: 0d508d470983 b73b967b0fc4
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Oct 20 19:42:14 2026 -1000

    Merge tag 'selinux-pr-20261015' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux

    Pull selinux updates from Paul Moore:

     - Continue to improve the load time validation of SELinux policies

       While SELinux policy loading remains a privileged operation, we
       continue the recent trend of hardening the policy parsing and
       validation code in the kernel to ensure that invalid, or poorly
       formatted policies are rejected at load time.

     - Correctly incorporate "neveraudit" into the xperms code

       This change aligns the xperms neveraudit handling with the
       conventional permission handling code, exiting early from the SELinux
       auditing code when neveraudit is enabled for the domain.

     - Mark the selinuxfs "status" and "policy" files immutable

       These are read-only kernel/userspace interfaces that could
       successfully be opened at the VFS layer through the use of
       CAP_DAC_OVERRIDE. With this pull request we are marking these two
       files as immutable so that the requests to open these file with write
       permissions now fail at the VFS layer. This also allows us to drop
       some of our mmap() checks around write permissions as the VFS will
       now also handle this for us.

       The existing SELinux permissions checks remain untouched.

     - Convert the selinuxfs inode numbers to u64

       Bring selinuxfs current with other filesystems in using u64 for inode
       numbering as opposed to the architecture dependent unsigned long.

     - Constify a number of the SELinux AVC function parameters

     - Remove a SELinux MLS function that was no longer used

    * tag 'selinux-pr-20261015' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux:
      selinux: validate permissive and neveraudit map types at load
      selinux: validate user MLS range and default level at load
      selinux: bounds-check role and user membership bitmaps at load
      selinux: check neveraudit in avc_xperms_audit_required()
      selinux: bounds-check filename transition source types at load
      selinux: reject duplicate symbol values during policy load
      selinux: reject a policy that both rejects and allows unknown classes
      selinux: constify avc function parameters
      selinux: avoid 64-bit division of inode numbers
      selinux: mark status and policy inodes as immutable, drop status mmap write checks
      selinux: remove unused mls_setup_user_range()
      selinux: convert selinuxfs inode numbers from unsigned long to u64
      selinux: tighten policydb_context_isvalid() checks