linux

mirror of https://github.com/hardkernel/linux.git synced 2026-03-25 03:50:24 +09:00

Files

Ondrej Mosnacek 869d1e4564 selinux: never allow relabeling on context mounts

commit a83d6ddaeb upstream.

In the SECURITY_FS_USE_MNTPOINT case we never want to allow relabeling
files/directories, so we should never set the SBLABEL_MNT flag. The
'special handling' in selinux_is_sblabel_mnt() is only intended for when
the behavior is set to SECURITY_FS_USE_GENFS.

While there, make the logic in selinux_is_sblabel_mnt() more explicit
and add a BUILD_BUG_ON() to make sure that introducing a new
SECURITY_FS_USE_* forces a review of the logic.

Fixes: d5f3a5f6e7 ("selinux: add security in-core xattr support for pstore and debugfs")
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Reviewed-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-05-08 07:19:12 +02:00

apparmor

apparmor: Make path_max parameter readonly

2018-03-22 09:17:48 +01:00

integrity

ima: re-initialize iint->atomic_flags

2018-12-01 09:44:26 +01:00

keys

KEYS: restrict /proc/keys by credentials at open time

2019-03-19 13:14:08 +01:00

loadpin

LSM: LoadPin: provide enablement CONFIG