linux

mirror of https://github.com/hardkernel/linux.git synced 2026-03-31 10:13:04 +09:00

Files

Stephen Smalley efd5ce8b23 selinux: fall back to ref-walk if audit is required

[ Upstream commit 0188d5c025 ]

commit bda0be7ad9 ("security: make inode_follow_link RCU-walk aware")
passed down the rcu flag to the SELinux AVC, but failed to adjust the
test in slow_avc_audit() to also return -ECHILD on LSM_AUDIT_DATA_DENTRY.
Previously, we only returned -ECHILD if generating an audit record with
LSM_AUDIT_DATA_INODE since this was only relevant from inode_permission.
Move the handling of MAY_NOT_BLOCK to avc_audit() and its inlined
equivalent in selinux_inode_permission() immediately after we determine
that audit is required, and always fall back to ref-walk in this case.

Fixes: bda0be7ad9 ("security: make inode_follow_link RCU-walk aware")
Reported-by: Will Deacon <will@kernel.org>
Suggested-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-02-24 08:34:40 +01:00

audit.h

SELinux: keep the code clean formating and syntax

2008-07-14 15:01:36 +10:00

avc_ss.h

selinux: wrap AVC state

2018-03-20 16:58:17 -04:00

avc.h

selinux: fall back to ref-walk if audit is required

2020-02-24 08:34:40 +01:00

classmap.h

selinux: use kernel linux/socket.h for genheaders and mdp