linux

mirror of https://github.com/hardkernel/linux.git synced 2026-03-26 20:40:24 +09:00

Files

Ondrej Mosnacek 914026d581 selinux: fix empty write to keycreate file

[ Upstream commit 464c258aa4 ]

When sid == 0 (we are resetting keycreate_sid to the default value), we
should skip the KEY__CREATE check.

Before this patch, doing a zero-sized write to /proc/self/keycreate
would check if the current task can create unlabeled keys (which would
usually fail with -EACCESS and generate an AVC). Now it skips the check
and correctly sets the task's keycreate_sid to 0.

Bug report: https://bugzilla.redhat.com/show_bug.cgi?id=1719067

Tested using the reproducer from the report above.

Fixes: 4eb582cf1f ("[PATCH] keys: add a way to store the appropriate context for newly-created keys")
Reported-by: Kir Kolyshkin <kir@sacred.ru>
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-07-26 09:14:07 +02:00

apparmor

apparmor: enforce nullbyte at end of tag string

2019-06-25 11:35:54 +08:00

integrity

evm: check hash algorithm passed to init_desc()

2019-06-09 09:17:21 +02:00

keys

keys: Fix dependency loop between construction record and auth key

2019-03-23 20:09:48 +01:00

loadpin

module: replace the existing LSM hook in init_module