Wang Weiyang 35fe1c2384 device_cgroup: Roll back to original exceptions after copy failure ...

commit e68bfbd3b3 upstream.

When add the 'a *:* rwm' entry to devcgroup A's whitelist, at first A's
exceptions will be cleaned and A's behavior is changed to
DEVCG_DEFAULT_ALLOW. Then parent's exceptions will be copyed to A's
whitelist. If copy failure occurs, just return leaving A to grant
permissions to all devices. And A may grant more permissions than
parent.

Backup A's whitelist and recover original exceptions after copy
failure.

Cc: stable@vger.kernel.org
Fixes: 4cef7299b4 ("device_cgroup: add proper checking when changing default behavior")
Signed-off-by: Wang Weiyang <wangweiyang2@huawei.com>
Reviewed-by: Aristeu Rozanski <aris@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-01-07 11:11:56 +01:00

..

apparmor

apparmor: Fix memleak in alloc_ns()

2022-12-31 13:32:31 +01:00

bpf

bpf: Implement task local storage

2020-11-06 08:08:37 -08:00

integrity

ima: Fix memory leak in __ima_inode_hash()

2023-01-07 11:11:52 +01:00

keys

KEYS: encrypted: fix key instantiation with user-provided data

2022-12-21 17:48:11 +01:00

landlock

landlock: Fix documentation style

2022-09-29 18:43:04 +02:00

loadpin

LoadPin: Ignore the "contents" argument of the LSM hooks

2022-12-31 13:33:07 +01:00

lockdown

lockdown: ratelimit denial messages

2022-09-14 07:37:50 -04:00

safesetid

LSM: SafeSetID: Add setgroups() security policy handling

2022-07-15 18:24:42 +00:00

selinux

selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()

2022-10-19 09:55:53 -04:00

smack

Merge tag 'pull-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2022-10-06 17:31:02 -07:00

tomoyo

tomoyo: struct path it might get from LSM callers won't have NULL dentry or mnt

2022-08-21 11:50:42 -04:00

yama

task_work: cleanup notification modes

2020-10-17 15:05:30 -06:00

commoncap.c

capabilities: fix potential memleak on error path from vfs_getxattr_alloc()

2022-10-28 06:44:33 -04:00

device_cgroup.c

device_cgroup: Roll back to original exceptions after copy failure

2023-01-07 11:11:56 +01:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

x86/retbleed: Add fine grained Kconfig knobs

2022-06-29 17:43:41 +02:00

Kconfig.hardening

security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

2022-12-31 13:33:10 +01:00

lsm_audit.c

lsm: clean up redundant NULL pointer check

2022-08-15 22:44:01 -04:00

Makefile

security: remove unneeded subdir-$(CONFIG_...)

2021-09-03 08:17:20 +09:00

min_addr.c

sysctl: pass kernel pointers to ->proc_handler

2020-04-27 02:07:40 -04:00

security.c

Merge tag 'powerpc-6.1-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

2022-10-09 14:05:15 -07:00