linux-stable

There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first.

Branch: master

History

Roberto Sassu 701b38995e security: Place security_path_post_mknod() where the original IMA call was Commit `08abce60d6` ("security: Introduce path_post_mknod hook") introduced security_path_post_mknod(), to replace the IMA-specific call to ima_post_path_mknod(). For symmetry with security_path_mknod(), security_path_post_mknod() was called after a successful mknod operation, for any file type, rather than only for regular files at the time there was the IMA call. However, as reported by VFS maintainers, successful mknod operation does not mean that the dentry always has an inode attached to it (for example, not for FIFOs on a SAMBA mount). If that condition happens, the kernel crashes when security_path_post_mknod() attempts to verify if the inode associated to the dentry is private. Move security_path_post_mknod() where the ima_post_path_mknod() call was, which is obviously correct from IMA/EVM perspective. IMA/EVM are the only in-kernel users, and only need to inspect regular files. Reported-by: Steve French <smfrench@gmail.com> Closes: https://lore.kernel.org/linux-kernel/CAH2r5msAVzxCUHHG8VKrMPUKQHmBpE6K9_vjhgDa1uAvwx4ppw@mail.gmail.com/ Suggested-by: Al Viro <viro@zeniv.linux.org.uk> Fixes: `08abce60d6` ("security: Introduce path_post_mknod hook") Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Reviewed-by: Christian Brauner <brauner@kernel.org> Reviewed-by: Mimi Zohar <zohar@linux.ibm.com> Acked-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		4 weeks ago
..
apparmor	lsm: use 32-bit compatible data types in LSM syscalls	2 months ago
bpf	lsm: mark the lsm_id variables are marked as static	6 months ago
integrity	lsm/stable-6.9 PR 20240312	2 months ago
keys	ima: Move to LSM infrastructure	3 months ago
landlock	landlock: Use f_cred in security_file_open() hook	2 months ago
loadpin	lsm: mark the lsm_id variables are marked as static	6 months ago
lockdown	LSM: Identify modules by more than name	6 months ago
safesetid	lsm: mark the lsm_id variables are marked as static	6 months ago
selinux	selinux: avoid dereference of garbage after mount failure	1 month ago
smack	lsm: use 32-bit compatible data types in LSM syscalls	2 months ago
tomoyo	tomoyo: fix UAF write bug in tomoyo_write_control()	2 months ago
yama	lsm: mark the lsm_id variables are marked as static	6 months ago
Kconfig	fortify: drop Clang version check for 12.0.1 or newer	2 months ago
Kconfig.hardening	hardening: Move BUG_ON_DATA_CORRUPTION to hardening options	9 months ago
Makefile	LSM: syscalls for current process attributes	6 months ago
commoncap.c	lsm: mark the lsm_id variables are marked as static	6 months ago
device_cgroup.c	device_cgroup: Fix kernel-doc warnings in device_cgroup	11 months ago
inode.c	security: convert to new timestamp accessors	7 months ago
lsm_audit.c	lsm: fix a number of misspellings	11 months ago
lsm_syscalls.c	lsm: use 32-bit compatible data types in LSM syscalls	2 months ago
min_addr.c	sysctl: pass kernel pointers to ->proc_handler	4 years ago
security.c	security: Place security_path_post_mknod() where the original IMA call was	4 weeks ago