Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Todd Kjos fc9c470cd5 binder: use cred instead of task for selinux checks ... commit 52f88693378a58094c538662ba652aff0253c4fe upstream. Since binder was integrated with selinux, it has passed 'struct task_struct' associated with the binder_proc to represent the source and target of transactions. The conversion of task to SID was then done in the hook implementations. It turns out that there are race conditions which can result in an incorrect security context being used. Fix by using the 'struct cred' saved during binder_open and pass it to the selinux subsystem. Cc: stable@vger.kernel.org # 5.14 (need backport for earlier stables) Fixes: 79af73079d ("Add security hooks to binder and implement the hooks for SELinux.") Suggested-by: Jann Horn <jannh@google.com> Signed-off-by: Todd Kjos <tkjos@google.com> Acked-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-11-17 09:48:16 +01:00
..
include
ss
.gitignore
avc.c	selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC	2021-07-19 08:53:10 +02:00
hooks.c	binder: use cred instead of task for selinux checks	2021-11-17 09:48:16 +01:00
ibpkey.c	selinux: Fix error return code in sel_ib_pkey_sid_slow()	2020-11-18 19:20:30 +01:00
Kconfig
Makefile
netif.c
netlabel.c
netlink.c
netnode.c
netport.c
nlmsgtab.c
selinuxfs.c	selinux: sel_avc_get_stat_idx should increase position index	2020-10-01 13:17:32 +02:00
xfrm.c