linux

mirror of https://github.com/hardkernel/linux.git synced 2026-03-27 13:00:25 +09:00

Files

Jann Horn 3f9a54ce49 apparmor: don't try to replace stale label in ptraceme check

[ Upstream commit ca3fde5214 ]

begin_current_label_crit_section() must run in sleepable context because
when label_is_stale() is true, aa_replace_current_label() runs, which uses
prepare_creds(), which can sleep.

Until now, the ptraceme access check (which runs with tasklist_lock held)
violated this rule.

Fixes: b2d09ae449 ("apparmor: move ptrace checks to using labels")
Reported-by: Cyrill Gorcunov <gorcunov@gmail.com>
Reported-by: kernel test robot <rong.a.chen@intel.com>
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-06-30 23:17:03 -04:00

apparmor

apparmor: don't try to replace stale label in ptraceme check

2020-06-30 23:17:03 -04:00

integrity

ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()

2020-06-22 09:05:26 +02:00

keys

mm: add kvfree_sensitive() for freeing sensitive data objects

2020-06-22 09:05:01 +02:00

loadpin

module: replace the existing LSM hook in init_module