linux

mirror of https://github.com/hardkernel/linux.git synced 2026-04-03 03:33:01 +09:00

Files

John Johansen 233363fd02 apparmor: fix ptrace label match when matching stacked labels

commit 0dda0b3fb2 upstream.

Given a label with a profile stack of
  A//&B or A//&C ...

A ptrace rule should be able to specify a generic trace pattern with
a rule like

  ptrace trace A//&**,

however this is failing because while the correct label match routine
is called, it is being done post label decomposition so it is always
being done against a profile instead of the stacked label.

To fix this refactor the cross check to pass the full peer label in to
the label_match.

Fixes: 290f458a4f ("apparmor: allow ptrace checks to be finer grained than just capability")
Reported-by: Matthew Garrett <mjg59@google.com>
Tested-by: Matthew Garrett <mjg59@google.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-01-17 09:45:27 +01:00

apparmor

apparmor: fix ptrace label match when matching stacked labels

2018-01-17 09:45:27 +01:00

integrity

ima: fix hash algorithm initialization

2017-12-10 13:40:38 +01:00

keys

KEYS: reject NULL restriction string when type is specified

2017-12-14 09:52:53 +01:00

loadpin

security: mark LSM hooks as __ro_after_init