linux

mirror of https://github.com/hardkernel/linux.git synced 2026-04-02 19:23:01 +09:00

Files

Eric Biggers 71d8548735 KEYS: restrict /proc/keys by credentials at open time

commit 4aa68e07d8 upstream.

When checking for permission to view keys whilst reading from
/proc/keys, we should use the credentials with which the /proc/keys file
was opened.  This is because, in a classic type of exploit, it can be
possible to bypass checks for the *current* credentials by passing the
file descriptor to a suid program.

Following commit 34dbbcdbf6 ("Make file credentials available to the
seqfile interfaces") we can finally fix it.  So let's do it.

Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Zubin Mithra <zsm@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-15 11:54:43 +09:00

apparmor

Merge 4.9.89 into android-4.9

2018-03-22 09:54:47 +01:00

integrity

ima: re-initialize iint->atomic_flags

2023-05-15 09:59:29 +09:00

keys

KEYS: restrict /proc/keys by credentials at open time

2023-05-15 11:54:43 +09:00

loadpin

LSM: LoadPin: provide enablement CONFIG