Paul Moore 6326948f94 lsm: security_task_getsecid_subj() -> security_current_getsecid_subj() ... The security_task_getsecid_subj() LSM hook invites misuse by allowing callers to specify a task even though the hook is only safe when the current task is referenced. Fix this by removing the task_struct argument to the hook, requiring LSM implementations to use the current task. While we are changing the hook declaration we also rename the function to security_current_getsecid_subj() in an effort to reinforce that the hook captures the subjective credentials of the current task and not an arbitrary task on the system. Reviewed-by: Serge Hallyn <serge@hallyn.com> Reviewed-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Paul Moore <paul@paul-moore.com>		2021-11-22 17:52:47 -05:00
..
ima_api.c	ima: Use strscpy instead of strlcpy	2021-10-09 22:17:58 -04:00
ima_appraise.c	lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()	2021-11-22 17:52:47 -05:00
ima_asymmetric_keys.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_crypto.c	ima/evm: Fix type mismatch	2021-06-08 16:29:10 -04:00
ima_efi.c	ima: generalize x86/EFI arch glue for other EFI architectures	2020-11-06 07:40:42 +01:00
ima_fs.c	ima/evm: Fix type mismatch	2021-06-08 16:29:10 -04:00
ima_init.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_kexec.c	ima: Fix warning: no previous prototype for function 'ima_add_kexec_buffer'	2021-06-11 11:27:03 -04:00
ima_main.c	lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()	2021-11-22 17:52:47 -05:00
ima_modsig.c	ima: Move comprehensive rule validation checks out of the token parser	2020-07-20 13:28:15 -04:00
ima_mok.c	IMA: remove -Wmissing-prototypes warning	2021-07-23 08:05:06 -04:00
ima_policy.c	ima: Use strscpy instead of strlcpy	2021-10-09 22:17:58 -04:00
ima_queue_keys.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
ima_queue.c	IMA: support for duplicate measurement records	2021-06-11 12:54:13 -04:00
ima_template_lib.c	ima: Fix fall-through warning for Clang	2021-06-08 23:33:48 -04:00
ima_template_lib.h	ima: Define new template fields xattrnames, xattrlengths and xattrvalues	2021-06-02 18:56:13 -04:00
ima_template.c	ima: Set correct casting types	2021-06-08 16:29:10 -04:00
ima.h	IMA: introduce a new policy option func=SETXATTR_CHECK	2021-08-16 17:35:35 -04:00
Kconfig	IMA: remove the dependency on CRYPTO_MD5	2021-08-16 17:29:10 -04:00
Makefile	ima: generalize x86/EFI arch glue for other EFI architectures	2020-11-06 07:40:42 +01:00