Mimi Zohar
2fb1c9a4f2
evm: prohibit userspace writing 'security.evm' HMAC value ...
Calculating the 'security.evm' HMAC value requires access to the
EVM encrypted key. Only the kernel should have access to it. This
patch prevents userspace tools(eg. setfattr, cp --preserve=xattr)
from setting/modifying the 'security.evm' HMAC value directly.
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: <stable@vger.kernel.org>
2014-06-12 17:58:07 -04:00
nick kvfree() from apparmor
2014-05-06 14:02:53 -04:00
evm: prohibit userspace writing 'security.evm' HMAC value
2014-06-12 17:58:07 -04:00
Merge branch 'serge-next-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linux-security
2014-06-10 10:05:36 -07:00
Merge branch 'serge-next-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linux-security
2014-06-10 10:05:36 -07:00
Merge branch 'smack-for-3.16' of git://git.gitorious.org/smack-next/kernel into next
2014-05-20 14:50:09 +10:00
get rid of pointless checks for NULL ->i_op
2014-04-01 23:19:16 -04:00
yama: Better permission check for ptraceme
2013-03-26 13:17:58 -07:00
Merge tag 'keys-20140314' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next
2014-04-14 11:42:49 +10:00
capabilities: allow nice if we are privileged
2013-08-30 23:44:09 -07:00
device_cgroup: use css_has_online_children() instead of has_children()
2014-05-16 13:22:52 -04:00
security: select correct default LSM_MMAP_MIN_ADDR on arm on arm64
2014-02-05 14:59:14 +00:00
audit: anchor all pid references in the initial pid namespace
2014-03-20 10:11:55 -04:00
security: cleanup Makefiles to use standard syntax for specifying sub-directories
2014-02-17 11:08:04 +11:00
Merge branch 'serge-next-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linux-security
2014-06-10 10:05:36 -07:00
2fb1c9a4f2