iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security
History
KP Singh 23e390cdbe security: Fix hook iteration and default value for inode_copy_up_xattr 
inode_copy_up_xattr returns 0 to indicate the acceptance of the xattr
and 1 to reject it. If the LSM does not know about the xattr, it's
expected to return -EOPNOTSUPP, which is the correct default value for
this hook. BPF LSM, currently, uses 0 as the default value and thereby
falsely allows all overlay fs xattributes to be copied up.

The iteration logic is also updated from the "bail-on-fail"
call_int_hook to continue on the non-decisive -EOPNOTSUPP and bail out
on other values.

Fixes: 98e828a0650f ("security: Refactor declaration of LSM hooks")
Signed-off-by: KP Singh <kpsingh@google.com>
Signed-off-by: James Morris <jmorris@namei.org>
2020-06-23 16:39:23 -07:00
..
apparmor
linux-kselftest-kunit-5.8-rc1
2020-06-09 10:04:47 -07:00
bpf
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
integrity
ima: Replace zero-length array with flexible-array
2020-06-15 23:08:32 -05:00
keys
Notifications over pipes + Keyring notifications
2020-06-13 09:56:21 -07:00
loadpin
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
lockdown
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2020-06-02 17:36:24 -07:00
safesetid
security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()
2019-10-30 08:45:57 -07:00
selinux
selinux/stable-5.8 PR 20200621
2020-06-21 15:41:24 -07:00
smack
Notifications over pipes + Keyring notifications
2020-06-13 09:56:21 -07:00
tomoyo
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
yama
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
commoncap.c
exec: Compute file based creds only once
2020-05-29 22:00:54 -05:00
device_cgroup.c
device_cgroup: Cleanup cgroup eBPF device filter code
2020-04-13 14:41:54 -04:00
inode.c
Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-07-19 10:42:02 -07:00
Kconfig
bpf: lsm: Initialize the BPF LSM hooks
2020-03-30 01:34:00 +02:00
Kconfig.hardening
meminit fix
2019-07-28 12:33:15 -07:00
lsm_audit.c
security,lockdown,selinux: implement SELinux lockdown
2019-12-09 17:53:58 -05:00
Makefile
device_cgroup: Cleanup cgroup eBPF device filter code
2020-04-13 14:41:54 -04:00
min_addr.c
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
security.c
security: Fix hook iteration and default value for inode_copy_up_xattr
2020-06-23 16:39:23 -07:00