David Howells
0fec3272ab
certs: Fix blacklist flag type confusion ...
[ Upstream commit 4993e1f9479a4161fd7d93e2b8b30b438f00cb0f ]
KEY_FLAG_KEEP is not meant to be passed to keyring_alloc() or key_alloc(),
as these only take KEY_ALLOC_* flags. KEY_FLAG_KEEP has the same value as
KEY_ALLOC_BYPASS_RESTRICTION, but fortunately only key_create_or_update()
uses it. LSMs using the key_alloc hook don't check that flag.
KEY_FLAG_KEEP is then ignored but fortunately (again) the root user cannot
write to the blacklist keyring, so it is not possible to remove a key/hash
from it.
Fix this by adding a KEY_ALLOC_SET_KEEP flag that tells key_alloc() to set
KEY_FLAG_KEEP on the new key. blacklist_init() can then, correctly, pass
this to keyring_alloc().
We can also use this in ima_mok_init() rather than setting the flag
manually.
Note that this doesn't fix an observable bug with the current
implementation but it is required to allow addition of new hashes to the
blacklist in the future without making it possible for them to be removed.
Fixes: 734114f878
2021-03-04 10:26:29 +01:00
can: can_create_echo_skb(): fix echo skb generation: always use skb_clone()
2020-11-18 19:20:19 +01:00
libceph: fix alloc_msg_with_page_vector() memory leaks
2020-04-02 15:11:02 +02:00
net: dsa: tag_8021q: replace dsa_8021q_remove_header with __skb_vlan_pop
2020-04-01 11:01:34 +02:00
gpio: add gpiod_toggle_active_low()
2020-02-19 19:53:09 +01:00
iio: core: remove extra semi-colon from devm_iio_device_register() macro
2020-04-29 16:33:12 +02:00
Input: elan_i2c - add more hardware ID for Lenovo laptops
2020-07-22 09:33:13 +02:00
mfd: stmfx: Disable IRQ in suspend to avoid spurious interrupt
2020-06-24 17:50:33 +02:00
net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering
2020-12-08 10:40:27 +01:00
mmc: core: Fix size overflow for mmc partitions
2020-10-01 13:17:20 +02:00
mtd: lpddr: Fix bad logic in print_drs_error
2020-11-01 12:01:05 +01:00
netfilter: x_tables: Switch synchronization to RCU
2020-12-30 11:50:54 +01:00
dmaengine: dw: Add DMA-channels mask cell support
2020-10-29 09:58:09 +01:00
net: qed: Disable aRFS for NPAR and 100G
2020-10-01 13:18:18 +02:00
raid6/test: fix a compilation warning
2020-02-24 08:36:47 +01:00
regulator fix for "regulator: core: Add regulator_is_equal() helper"
2020-02-11 04:35:55 -08:00
exec: Transform exec_update_mutex into a rw_semaphore
2021-01-09 13:44:55 +01:00
spi: Introduce device-managed SPI controller allocation
2020-11-24 13:29:22 +01:00
SUNRPC: Move simple_get_bytes and simple_get_netobj into private header
2021-02-13 13:52:56 +01:00
usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart
2020-11-05 11:43:15 +01:00
ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI
2021-01-19 18:26:16 +01:00
KVM: arm64: ARM_SMCCC_ARCH_WORKAROUND_1 doesn't return SMCCC_RET_NOT_REQUIRED
2020-11-18 19:20:21 +01:00
bdi: add a ->dev_name field to struct backing_dev_info
2020-05-14 07:58:30 +02:00
bdi: move bdi_dev_name out of line
2020-05-14 07:58:30 +02:00
exec: Add exec_update_mutex to replace cred_guard_mutex
2020-10-01 13:17:47 +02:00
bitfield.h: don't compile-time validate _val in FIELD_FIT
2020-08-19 08:16:28 +02:00
include/linux/bitops.h: avoid clang shift-count-overflow warnings
2020-06-24 17:50:39 +02:00
blk-mq-debugfs: update blk_queue_flag_name[] accordingly for new flags
2020-07-22 09:32:52 +02:00
blktrace: Protect q->blk_trace with RCU
2020-03-05 16:43:52 +01:00
bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h
2021-03-04 10:26:13 +01:00
bpf: Limit caller's stack depth 256 for subprogs with tailcalls
2020-10-29 09:58:06 +01:00
ext4: use non-movable memory for superblock readahead
2020-04-23 10:36:15 +02:00
kbuild: avoid static_assert for genksyms
2020-12-16 10:56:58 +01:00
block: allow for_each_bvec to support zero len bvec
2020-09-09 19:12:34 +02:00
cgroup: Fix sock_cgroup_data on big-endian.
2020-07-22 09:32:50 +02:00
cgroup: fix cgroup_sk_alloc() for sk_clone_lock()
2020-07-22 09:32:49 +02:00
compiler.h: fix barrier_data() on clang
2020-12-16 10:56:59 +01:00
compiler.h: Raise minimum version of GCC to 5.1 for arm64
2021-01-23 15:57:55 +01:00
vmlinux.lds.h: Create section for protection against instrumentation
2021-02-17 10:35:16 +01:00
vmlinux.lds.h: Create section for protection against instrumentation
2021-02-17 10:35:16 +01:00
cpu/hotplug: Ignore pm_wakeup_pending() for disable_nonboot_cpus()
2020-04-17 10:50:11 +02:00
padata: validate cpumask without removed CPU during offline
2020-02-24 08:36:34 +01:00
dax: Fix compilation for CONFIG_DAX && !CONFIG_FS_DAX
2020-09-23 12:40:47 +02:00
debugfs: Fix !DEBUG_FS debugfs_create_automount
2020-10-01 13:17:21 +02:00
thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n
2020-04-17 10:50:09 +02:00
dm integrity: fix integrity recalculation that is improperly skipped
2020-07-29 10:18:45 +02:00
dm integrity: fix flush with external metadata device
2021-01-19 18:26:13 +01:00
dmabuf: use spinlock to access dmabuf->name
2020-07-29 10:18:29 +02:00
dmaengine: Store module owner in dma_device struct
2020-02-24 08:36:40 +01:00
iommu/vt-d: Silence RCU-list debugging warnings
2020-04-01 11:01:53 +02:00
efi: provide empty efi_enter_virtual_mode implementation
2020-09-03 11:26:49 +02:00
elfcore: fix building with clang
2021-01-23 15:57:55 +01:00
elfnote: mark all .note sections SHF_ALLOC
2020-06-17 16:40:20 +02:00
eventfd: track eventfd_signal() recursion depth
2020-02-11 04:35:37 -08:00
f2fs: Add a new CP flag to help fsck fix resize SPO issues
2020-04-23 10:36:33 +02:00
fbmem: pull fbcon_update_vcs() out of fb_set_var()
2020-09-03 11:27:09 +02:00
bpf: Avoid warning when re-casting __bpf_call_base into __bpf_call_base_args
2021-03-04 10:26:13 +01:00
Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts
2020-10-14 10:32:56 +02:00
writeback: Drop I_DIRTY_TIME_EXPIRE
2021-01-30 13:54:11 +01:00
fscrypt: add fscrypt_is_nokey_name()
2021-01-06 14:48:35 +01:00
fsnotify: replace inode pointer with an object id
2020-05-14 07:58:30 +02:00
futex: Fix inode life-time issue
2020-03-25 08:25:58 +01:00
block/diskstats: more accurate approximation of io_ticks for slow disks
2020-10-07 08:01:29 +02:00
HID: core: Sanitize event code and type when mapping input
2020-09-05 11:22:49 +02:00
hil/parisc: Disable HIL driver when it gets stuck
2020-11-05 11:43:36 +01:00
mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page
2021-02-10 09:25:31 +01:00
Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23)
2020-08-11 15:33:38 +02:00
i2c: algo: pca: Reapply i2c bus settings after reset
2020-09-23 12:40:38 +02:00
ieee80211: Fix incorrect mask for default PE duration
2020-06-03 08:21:36 +02:00
vlan: consolidate VLAN parsing code and limit max parsing depth
2020-07-22 09:32:49 +02:00
inet_diag: return classid for all socket types
2020-03-18 07:17:38 +01:00
iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built
2021-02-03 23:26:01 +01:00
iommu/vt-d: Fix compile warning from intel-svm.h
2020-02-28 17:22:26 +01:00
io-mapping: indicate mapping failure
2020-07-29 10:18:44 +02:00
lib: devres: add a helper function for ioremap_uc
2020-05-10 10:31:30 +02:00
block: Fix use-after-free issue accessing struct io_cq
2020-04-17 10:50:04 +02:00
/dev/mem: Revoke mappings when a driver claims the region
2020-06-24 17:50:35 +02:00
genirq/affinity: Make affinity setting if activated opt-in
2020-08-21 13:05:20 +02:00
genirq/irqdomain: Add an irq_create_mapping_affinity() function
2020-12-11 13:23:30 +01:00
jbd2: clean __jbd2_journal_abort_hard() and __journal_abort_soft()
2020-06-24 17:50:48 +02:00
kallsyms: Refactor kallsyms_show_value() to take cred
2020-07-16 08:16:44 +02:00
kdev_t: always inline major/minor helper functions
2021-01-09 13:44:54 +01:00
ima: Free IMA measurement buffer after kexec syscall
2021-03-04 10:26:25 +01:00
KEYS: Don't write out to userspace while holding key semaphore
2020-04-23 10:36:45 +02:00
certs: Fix blacklist flag type confusion
2021-03-04 10:26:29 +01:00
kgdb: Fix spurious true from in_dbg_master()
2020-06-22 09:31:03 +02:00
mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected by khugepaged
2020-10-14 10:33:05 +02:00
tracing/kprobe: Fix to support kretprobe events on unloaded modules
2021-02-13 13:52:54 +01:00
kthread: Extract KTHREAD_IS_PER_CPU
2021-02-07 15:35:49 +01:00
KVM: x86: Fix APIC page invalidation race
2020-06-17 16:40:26 +02:00
x86/kvm: Cache gfn to pfn translation
2020-02-11 04:35:40 -08:00
ata: make qc_prep return ata_completion_errors
2020-10-01 13:18:26 +02:00
linkage: Introduce new macros for assembler symbols
2020-11-10 12:37:24 +01:00
rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls
2020-02-24 08:36:45 +01:00
include/linux/log2.h: add missing () around n in roundup_pow_of_two()
2020-09-09 19:12:29 +02:00
mm, memcg: fix inconsistent oom event behavior
2020-05-20 08:20:27 +02:00
memstick: Skip allocating card when removing host
2020-10-07 08:01:25 +02:00
mm: provide a saner PTE walking API for modules
2021-02-26 10:10:28 +01:00
mm: replace memmap_context by meminit_context
2020-10-07 08:01:29 +02:00
Input: add SW_MACHINE_COVER
2020-07-29 10:18:36 +02:00
genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set
2021-02-10 09:25:30 +01:00
net: introduce helper sendpage_ok() in include/linux/net.h
2020-10-14 10:33:00 +02:00
net: watchdog: hold device global xmit lock during tx disable
2021-02-17 10:35:19 +01:00
netfilter: clear skb->next in NF_HOOK_LIST()
2020-12-02 08:49:44 +01:00
netfilter: use actual socket sk rather than skb sk when routing harder
2020-11-18 19:20:17 +01:00
netfilter: use actual socket sk rather than skb sk when routing harder
2020-11-18 19:20:17 +01:00
nfs: set invalid blocks after NFSv4 writes
2020-06-24 17:50:44 +02:00
NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests()
2020-10-01 13:17:52 +02:00
NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION
2020-05-06 08:15:05 +02:00
mm: don't rely on system state to detect hot-plug operations
2020-10-07 08:01:30 +02:00
nvme-fc: Revert "add module to ops template to allow module references"
2020-04-17 10:50:10 +02:00
of: fix linker-section match-table corruption
2021-01-06 14:48:37 +01:00
mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary
2020-10-29 09:57:45 +01:00
overflow: Include header file with SIZE_MAX declaration
2020-10-29 09:57:51 +01:00
padata: add separate cpuhp node for CPUHP_PADATA_DEAD
2020-06-17 16:40:22 +02:00
page-flags: fix a crash at SetPageError(THP_SWAP)
2020-03-25 08:25:58 +01:00
mm/page_owner: change split_page_owner to take a count
2020-10-29 09:57:52 +01:00
PCI: endpoint: Fix for concurrent memory allocation in OB address region
2020-04-17 10:50:11 +02:00
PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY
2020-10-29 09:57:54 +01:00
x86/amd_nb: Add AMD family 17h model 60h PCI IDs
2020-06-22 09:31:17 +02:00
percpu: Separate decrypted varaibles anytime encryption can be enabled
2020-02-11 04:35:44 -08:00
percpu_counter: fix a data race at vm_committed_as
2020-04-23 10:36:37 +02:00
net: phy: fix MDIO bus PM PHY resuming
2020-03-18 07:17:46 +01:00
driver code: clarify and fix platform device DMA mask allocation
2020-03-18 07:17:56 +01:00
PM: runtime: Fix timer_expires data type on 32-bit arches
2020-11-01 12:01:06 +01:00
PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
2020-12-30 11:50:53 +01:00
pnp: Use list_for_each_entry() instead of open coding
2020-05-20 08:20:27 +02:00
random32: make prandom_u32() output unpredictable
2020-11-18 19:20:20 +01:00
i40e: optimise prefetch page refcount
2020-12-30 11:50:55 +01:00
printk: queue wake_up_klogd irq_work only if per-CPU areas are ready
2020-05-02 08:48:42 +02:00
proc: fix lookup in /proc/net subdirectories after setns(2)
2021-01-12 20:16:10 +01:00
serial: qcom_geni_serial: To correct QUP Version detection logic
2020-11-01 12:01:06 +01:00
random32: move the pseudo-random 32-bit definitions to prandom.h
2020-08-07 09:34:01 +02:00
rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls
2020-02-24 08:36:45 +01:00
rhashtable: Fix unprotected RCU dereference in __rht_ptr
2020-08-05 09:59:47 +02:00
rwsem: Implement down_read_interruptible
2021-01-09 13:44:55 +01:00
signal: Extend exec_id to 64bits
2020-04-17 10:50:12 +02:00
fix namespaced fscaps when !CONFIG_SECURITY
2020-12-30 11:51:30 +01:00
vt: selection, introduce vc_is_sel
2020-04-02 15:11:00 +02:00
seq_buf: Avoid type mismatch for seq_buf_init
2020-12-30 11:51:21 +01:00
seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
2020-10-01 13:17:25 +02:00
x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned
2020-06-17 16:40:31 +02:00
net: skbuff: disambiguate argument and member for skb_list_walk_safe helper
2021-01-23 15:57:57 +01:00
bpf: sockmap: Require attach_bpf_fd when detaching a program
2020-08-07 09:34:02 +02:00
string.h: fix incompatibility between FORTIFY_SOURCE and KASAN
2020-06-22 09:31:12 +02:00
ACPI: PM: s2idle: Avoid possible race related to the EC GPE
2020-02-19 19:52:56 +01:00
uapi: rename ext2_swab() to swab() and share globally in swab.h
2020-04-13 10:48:07 +02:00
include/linux/swapops.h: correct guards for non_swap_entry()
2020-04-23 10:36:37 +02:00
swiotlb: using SIZE_MAX needs limits.h included
2020-11-24 13:29:04 +01:00
tcp: allow at most one TLP probe per flight
2020-07-31 18:39:31 +02:00
time: Prevent undefined behaviour in timespec64_to_ns()
2020-11-18 19:20:15 +01:00
tpm: Unify the mismatching TPM space buffer sizes
2020-08-19 08:16:27 +02:00
tpm: Require that all digests are present in TCG_PCR_EVENT2 structures
2020-08-19 08:15:57 +02:00
seq_buf: Avoid type mismatch for seq_buf_init
2020-12-30 11:51:21 +01:00
tracepoint: Mark __tracepoint_string's __used
2020-08-19 08:15:53 +02:00
tty: Fix ->session locking
2020-12-11 13:23:28 +01:00
udp: fix skb_copy_and_csum_datagram with odd segment sizes
2021-02-17 10:35:19 +01:00
USB: UAS: introduce a quirk to set no_write_same
2020-12-21 13:27:06 +01:00
net: be more gentle about silly gso requests coming from user
2020-06-10 20:24:55 +02:00
vsock/virtio: add transport parameter to the virtio_transport_reset_no_sock()
2020-10-07 08:01:24 +02:00
vmalloc: fix remap_vmalloc_range() bounds checks
2020-04-29 16:33:14 +02:00
vt: switch vt_dont_switch to bool
2020-04-02 15:11:00 +02:00
xarray: Fix early termination of xas_for_each_marked
2020-04-17 10:50:18 +02:00
xattr: break delegations in {set,remove}xattr
2020-08-11 15:33:39 +02:00
mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING
2020-12-16 10:56:59 +01:00
