linux

mirror of https://github.com/hardkernel/linux.git synced 2026-03-24 19:40:21 +09:00

Files

Paul Moore cbc5bcf810 selinux: properly handle multiple messages in selinux_netlink_send() (CVE-2020-0255)

PD#SWPL-29581

commit fb73974172 upstream.

Fix the SELinux netlink_send hook to properly handle multiple netlink
messages in a single sk_buff; each message is parsed and subject to
SELinux access control.  Prior to this patch, SELinux only inspected
the first message in the sk_buff.

Change-Id: Id73f242290f8693b1ab1177c27cae8add5a5cbe6
Cc: stable@vger.kernel.org
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Reviewed-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Hanjie Lin <hanjie.lin@amlogic.com>

2020-12-17 17:32:09 +09:00

apparmor

Merge 4.9.89 into android-4.9

2018-03-22 09:54:47 +01:00

integrity

Revert "ima: limit file hash setting by user to fix and log modes"

2018-06-06 16:44:33 +02:00

keys

Merge 4.9.84 into android-4.9

2018-02-26 09:18:03 +01:00

loadpin

LSM: LoadPin: provide enablement CONFIG