Mark Salyzyn
3484eba91d
FROMLIST: Add flags option to get xattr method paired to __vfs_getxattr ...
Add a flag option to get xattr method that could have a bit flag of
XATTR_NOSECURITY passed to it. XATTR_NOSECURITY is generally then
set in the __vfs_getxattr path when called by security
infrastructure.
This handles the case of a union filesystem driver that is being
requested by the security layer to report back the xattr data.
For the use case where access is to be blocked by the security layer.
The path then could be security(dentry) ->
__vfs_getxattr(dentry...XATTR_NOSECURITY) ->
handler->get(dentry...XATTR_NOSECURITY) ->
__vfs_getxattr(lower_dentry...XATTR_NOSECURITY) ->
lower_handler->get(lower_dentry...XATTR_NOSECURITY)
which would report back through the chain data and success as
expected, the logging security layer at the top would have the
data to determine the access permissions and report back the target
context that was blocked.
Without the get handler flag, the path on a union filesystem would be
the errant security(dentry) -> __vfs_getxattr(dentry) ->
handler->get(dentry) -> vfs_getxattr(lower_dentry) -> nested ->
security(lower_dentry, log off) -> lower_handler->get(lower_dentry)
which would report back through the chain no data, and -EACCES.
For selinux for both cases, this would translate to a correctly
determined blocked access. In the first case with this change a correct avc
log would be reported, in the second legacy case an incorrect avc log
would be reported against an uninitialized u:object_r:unlabeled:s0
context making the logs cosmetically useless for audit2allow.
This patch series is inert and is the wide-spread addition of the
flags option for xattr functions, and a replacement of __vfs_getxattr
with __vfs_getxattr(...XATTR_NOSECURITY).
Signed-off-by: Mark Salyzyn <salyzyn@android.com>
Reviewed-by: Jan Kara <jack@suse.cz>
Acked-by: Jan Kara <jack@suse.cz>
Acked-by: Jeff Layton <jlayton@kernel.org>
Acked-by: David Sterba <dsterba@suse.com>
Acked-by: Darrick J. Wong <darrick.wong@oracle.com>
Acked-by: Mike Marshall <hubcap@omnibond.com>
Cc: Stephen Smalley <sds@tycho.nsa.gov>
Cc: linux-kernel@vger.kernel.org
Cc: kernel-team@android.com
Cc: linux-security-module@vger.kernel.org
(cherry picked from (rejected from archive because of too many recipients))
Signed-off-by: Mark Salyzyn <salyzyn@google.com>
Bug: 133515582
Bug: 136124883
Bug: 129319403
Change-Id: Iabbb8771939d5f66667a26bb23ddf4c562c349a1
2019-11-05 13:50:57 -08:00
linux-can-next-for-5.4-20190904
2019-09-05 12:17:50 +02:00
libceph: add function that clears osd client's abort_err
2019-09-16 12:06:23 +02:00
clk: add include guard to clk-conf.h
2019-09-17 10:27:46 -07:00
net: dsa: sja1105: Fix sleeping while atomic in .port_hwtstamp_set
2019-10-02 12:19:53 -04:00
Char/Misc driver patches for 5.4-rc1
2019-09-18 11:14:31 -07:00
gpiolib: Initialize the hardware with a callback
2019-10-15 01:18:46 +02:00
staging: greybus: fix more header declarations
2019-08-28 17:24:22 +02:00
chrome platform changes for v5.4
2019-09-19 14:14:28 -07:00
Merge branch 'next' into for-linus
2019-09-16 09:56:27 -07:00
mailbox: mediatek: cmdq: clear the event in cmdq initial flow
2019-09-17 00:40:05 -05:00
- New Drivers
2019-09-23 19:37:49 -07:00
net/mlx5: Fix flow counter list auto bits struct
2019-10-29 16:27:17 -07:00
Merge 5.4-rc1-prereleae into android-mainline
2019-09-23 14:14:08 +02:00
This pull-request contains the following changes for MTD:
2019-09-21 10:59:54 -07:00
Merge Linus's 5.4-rc1-prerelease branch into android-mainline
2019-09-20 16:07:54 -07:00
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
dmaengine: imx-sdma: fix size check for sdma script_number
2019-10-14 13:33:44 +05:30
RDMA subsystem updates for 5.4
2019-09-21 10:26:24 -07:00
regulator: add missing 'static inline' to a helper's stub
2019-09-03 12:37:16 +01:00
Linux 5.4-rc1
2019-10-02 19:10:07 +02:00
ANDROID: soc: qcom: Add required header to irq.h
2019-10-25 15:20:02 +05:30
soundwire: stream: make stream name a const pointer
2019-09-04 14:57:28 +05:30
SUNRPC: Destroy the back channel when we destroy the host transport
2019-10-30 12:04:35 -04:00
Merge Linus's 5.4-rc1-prerelease branch into android-mainline
2019-09-20 16:07:54 -07:00
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
ANDROID: cpufreq: arch_topology: implement max frequency capping
2019-10-01 10:36:33 +01:00
kill LOOKUP_NO_EVAL, don't bother including namei.h from audit.h
2019-08-30 21:29:32 -04:00
writeback, memcg: Implement foreign dirty flushing
2019-08-27 09:22:38 -06:00
writeback: Separate out wb_get_lookup() from wb_get_create()
2019-08-27 09:22:38 -06:00
backlight: Expose brightness curve type through sysfs
2019-09-02 15:55:03 +01:00
FROMLIST: block: blk-crypto for Inline Encryption
2019-10-30 21:59:38 +00:00
FROMLIST: block: Add encryption context to struct bio
2019-10-30 14:14:59 -07:00
bitmap.h: fix kernel-doc warning and typo
2019-10-14 15:04:01 -07:00
lib: introduce copy_struct_from_user() helper
2019-10-01 15:45:03 +02:00
blkcg: separate blkcg_conf_get_disk() out of blkg_conf_prep()
2019-08-28 21:17:04 -06:00
FROMLIST: block: blk-crypto for Inline Encryption
2019-10-30 21:59:38 +00:00
block: Delay default elevator initialization
2019-09-05 19:52:34 -06:00
FROMLIST: block: Add encryption context to struct bio
2019-10-30 14:14:59 -07:00
FROMLIST: block: Keyslot Manager for Inline Encryption
2019-10-30 13:15:53 -07:00
bpf: introduce verifier internal test flag
2019-08-28 00:30:11 +02:00
kprobes: Prohibit probing on BUG() and WARN() address
2019-09-05 10:15:16 +02:00
clk: add pre and post change rate callbacks
2019-10-15 15:09:00 -07:00
We have a small collection of core framework updates this time, mostly around
2019-09-20 15:45:07 -07:00
mm, compaction: raise compaction priority after it withdrawns
2019-09-24 15:54:10 -07:00
include/linux/compiler.h: fix Oops for Clang-compiled kernels
2019-09-08 14:53:58 +02:00
compiler_attributes.h: Add 'fallthrough' pseudo keyword for switch/case use
2019-10-11 09:26:05 -07:00
Make use of gcc 9's "asm inline()" (Rasmus Villemoes):
2019-09-21 09:47:19 -07:00
driver-core: add include guard to linux/container.h
2019-09-04 13:38:26 +02:00
cpu/SMT: create and export cpu_smt_possible()
2019-09-24 13:37:28 +02:00
Linux 5.4-rc5
2019-10-28 13:11:46 +01:00
Power management updates for 5.4-rc1
2019-09-17 19:15:14 -07:00
cpuidle-haltpoll: vcpu hotplug support
2019-09-03 09:36:36 +02:00
cpumask: nicer for_each_cpumask_and() signature
2019-09-25 17:51:40 -07:00
selinux/stable-5.4 PR 20190917
2019-09-23 11:21:04 -07:00
Merge Linus's 5.4-rc1-prerelease branch into android-mainline
2019-09-20 16:07:54 -07:00
ANDROID: driver core: Allow a device to wait on optional suppliers
2019-10-24 20:53:40 +00:00
Merge 5.4-rc1-prereleae into android-mainline
2019-09-23 14:14:08 +02:00
dma-mapping updates for 5.4:
2019-09-19 13:27:23 -07:00
dma-mapping: remove arch_dma_mmap_pgprot
2019-08-29 16:43:22 +02:00
dynamic_debug: provide dynamic_hex_dump stub
2019-10-22 12:54:44 -07:00
EDAC: Prefer 'unsigned int' to bare use of 'unsigned'
2019-09-03 19:21:19 +02:00
x86, efi: Never relocate kernel below lowest acceptable address
2019-10-31 09:40:19 +01:00
block: Introduce elevator features
2019-09-05 19:52:33 -06:00
ANDROID: Revert "Merge tag 'modules-for-v5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/jeyu/linux"
2019-10-23 12:04:25 +00:00
bpf: Fix use after free in subprog's jited symbol removal
2019-10-22 11:26:09 -07:00
Linux 5.4-rc1
2019-10-02 19:10:07 +02:00
fuse update for 5.4
2019-09-25 09:55:59 -07:00
FROMLIST: fscrypt: add inline encryption support
2019-10-30 22:01:39 +00:00
ANDROID: driver core: Allow fwnode_operations.add_links to differentiate errors
2019-10-24 20:54:01 +00:00
net: fix sk_page_frag() recursion from memory reclaim
2019-10-28 16:17:31 -07:00
Linux 5.3-rc7
2019-09-05 11:40:54 +02:00
staging: greybus: move core include files to include/linux/greybus/
2019-08-27 19:02:59 +02:00
HID: core: Add printk_once variants to hid_warn() etc
2019-09-18 15:58:13 +02:00
hrtimer: Add kernel doc annotation for HRTIMER_MODE_HARD
2019-08-28 13:01:25 +02:00
libnvdimm fixes v5.4-rc1
2019-09-29 10:33:41 -07:00
mm: introduce page_size()
2019-09-24 15:54:08 -07:00
hwmon: Fix HWMON_P_MIN_ALARM mask
2019-10-02 06:36:50 -07:00
- First round of vmbus hibernation support from Dexuan Cui.
2019-09-24 12:36:31 -07:00
Merge branch 'i2c/for-5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux
2019-09-24 16:48:02 -07:00
powercap: idle_inject: Use higher resolution for idle injection
2019-09-03 11:33:29 +02:00
net: remove unnecessary variables and callback
2019-10-24 14:53:49 -07:00
team: fix nested locking lockdep warning
2019-10-24 14:53:48 -07:00
net: remove unnecessary variables and callback
2019-10-24 14:53:49 -07:00
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
posix-cpu-timers: Create a container struct
2019-08-28 11:50:33 +02:00
Merge branches 'arm/omap', 'arm/exynos', 'arm/smmu', 'arm/mediatek', 'arm/qcom', 'arm/renesas', 'x86/amd', 'x86/vt-d' and 'core' into next
2019-09-11 12:39:19 +02:00
UPSTREAM: interconnect: Add pre_aggregate() callback
2019-09-06 10:55:53 -07:00
UPSTREAM: interconnect: Add support for path tags
2019-09-06 10:55:53 -07:00
Power management updates for 5.4-rc1
2019-09-17 19:15:14 -07:00
augmented rbtree: add new RB_DECLARE_CALLBACKS_MAX macro
2019-09-25 17:51:39 -07:00
Merge branch 'arm/smmu' into arm/mediatek
2019-08-30 16:12:10 +02:00
iomap: move the iomap_dio_rw ->end_io callback into a structure
2019-09-19 15:32:45 -07:00
ANDROID: staging: ion: Fix missing entry in kerneldoc header
2019-10-03 16:15:34 -07:00
FROMLIST: genirq: Introduce irq_chip_get/set_parent_state calls
2019-10-24 15:31:14 +00:00
FROMLIST: irqdomain: add bus token DOMAIN_BUS_WAKEUP
2019-10-24 15:29:50 +00:00
jbd2: remove jbd2_journal_inode_add_[write|wait]
2019-09-24 15:54:07 -07:00
kernel.h: Add non_block_start/end()
2019-09-07 04:28:05 -03:00
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
afs: Provide an RCU-capable key lookup
2019-09-02 11:43:54 +01:00
FROMLIST: block: Keyslot Manager for Inline Encryption
2019-10-30 13:15:53 -07:00
kgdb: don't use a notifier to enter kgdb at panic; call directly
2019-09-25 17:51:40 -07:00
khugepaged: enable collapse pmd for pte-mapped THP
2019-09-24 15:54:11 -07:00
kvm: x86, powerpc: do not allow clearing largepages debugfs entry
2019-09-30 18:52:00 +02:00
leds: core: Fix leds.h structure documentation
2019-10-08 22:05:58 +02:00
libnvdimm/security: Introduce a 'frozen' attribute
2019-08-29 13:49:13 -07:00
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
include: mdio: Add driver data helpers
2019-09-05 12:32:05 +02:00
mm, memcg: make scan aggression always exclude protection
2019-10-07 15:47:20 -07:00
drivers/base/memory.c: don't store end_section_nr in memory blocks
2019-09-24 15:54:09 -07:00
Revert "Revert "mm, thp: restore node-local hugepage allocations""
2019-09-28 14:05:38 -07:00
libnvdimm fixes v5.4-rc1
2019-09-29 10:33:41 -07:00
net: phy: micrel: Update KSZ87xx PHY name
2019-10-17 16:31:52 -07:00
net: phy: fix write to mii-ctrl1000 register
2019-10-04 18:11:08 -07:00
Merge 5.4-rc1-prelrease into android-mainline
2019-10-02 17:58:47 +02:00
Linux 5.4-rc1
2019-10-02 19:10:07 +02:00
fork: improve error message for corrupted page tables
2019-09-25 17:51:40 -07:00
mm/mmu_notifiers: annotate with might_sleep()
2019-09-07 04:28:04 -03:00
mm: thp: extract split_queue_* into a struct
2019-09-24 15:54:11 -07:00
ANDROID: ALSA: jack: Update supported jack switch types
2019-10-25 18:03:51 +00:00
ANDROID: unconditionally compile sig_ok in struct module
2019-10-18 18:11:18 +00:00
Merge Linus's 5.4-rc1-prerelease branch into android-mainline
2019-09-20 16:07:54 -07:00
net: remove unnecessary variables and callback
2019-10-24 14:53:49 -07:00
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
netfilter: move nf_bridge_frag_data struct definition to a more appropriate header.
2019-09-13 12:35:33 +02:00
netfilter: move nf_bridge_frag_data struct definition to a more appropriate header.
2019-09-13 12:35:33 +02:00
NFS: Refactor nfs_instantiate() for dentry referencing callers
2019-09-20 15:15:24 -04:00
nvme-pci: Add support for variable IO SQ element size
2019-08-29 12:55:02 -07:00
gpio: of: Make of_gpio_simple_xlate() private
2019-09-11 14:46:02 +01:00
padata: remove cpu_index from the parallel_queue
2019-09-13 21:15:41 +10:00
mm, page_owner: rename flag indicating that page is allocated
2019-10-14 15:04:00 -07:00
mm: page cache: store only head pages in i_pages
2019-09-24 15:54:08 -07:00
pagewalk: separate function pointers from iterator data
2019-09-07 04:28:04 -03:00
pci-v5.4-changes
2019-09-23 19:16:01 -07:00
PCI/ACPI: Move _HPP & _HPX functions to pci-acpi.c
2019-08-28 15:25:53 -05:00
pci-v5.4-changes
2019-09-23 19:16:01 -07:00
Linux 5.4-rc6
2019-11-04 06:51:47 +01:00
net: phy: extract pause mode
2019-10-04 18:11:08 -07:00
net: fixed_phy: Add forward declaration for struct gpio_desc;
2019-09-05 11:54:14 +02:00
driver core: platform: Add platform_get_irq_byname_optional()
2019-10-07 12:52:44 +02:00
PM: QoS: Drop frequency QoS types from device PM QoS
2019-10-21 02:05:21 +02:00
posix-cpu-timers: Always clear head pointer on dequeue
2019-09-05 21:16:22 +02:00
lib/hexdump: make print_hex_dump_bytes() a nop on !DEBUG builds
2019-09-25 17:51:39 -07:00
software node: Add software_node_find_by_name()
2019-08-26 11:35:13 +02:00
pwm: Ensure pwm_apply_state() doesn't modify the state argument
2019-09-21 03:25:10 +02:00
quota: fix wrong condition in is_quota_modification()
2019-09-12 12:09:16 +02:00
vfs: Convert ramfs, shmem, tmpfs, devtmpfs, rootfs to use the new mount API
2019-09-12 21:05:34 -04:00
augmented rbtree: rework the RB_DECLARE_CALLBACKS macro definition
2019-09-25 17:51:39 -07:00
Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-09-16 17:25:49 -07:00
rcu: Don't include <linux/ktime.h> in rcutiny.h
2019-08-26 16:27:01 -07:00
tasks, sched/core: With a grace period after finish_task_switch(), remove unnecessary code
2019-09-25 17:42:29 +02:00
cifs: Add support for root file systems
2019-09-16 11:43:38 -05:00
Linux 5.4-rc4
2019-10-26 19:24:41 +02:00
efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
2019-10-31 09:40:21 +01:00
vfs: Convert ramfs, shmem, tmpfs, devtmpfs, rootfs to use the new mount API
2019-09-12 21:05:34 -04:00
mm: shrinker: make shrinker not depend on memcg kmem
2019-09-24 15:54:11 -07:00
net: add skb_queue_empty_lockless()
2019-10-28 13:33:41 -07:00
mm, sl[aou]b: guarantee natural alignment for kmalloc(power-of-two)
2019-10-07 15:47:20 -07:00
net: increase SOMAXCONN to 4096
2019-10-31 14:01:40 -07:00
net: stmmac: implement support for passive mode converters via dt
2019-09-11 15:27:09 +01:00
lib/string: Make memzero_explicit() inline instead of external
2019-10-08 13:27:05 +02:00
Merge Linus's 5.4-rc1-prerelease branch into android-mainline
2019-09-20 16:07:54 -07:00
mm: introduce MADV_PAGEOUT
2019-09-25 17:51:41 -07:00
swiotlb: Split size parameter to map/unmap APIs
2019-09-11 12:34:29 +02:00
UPSTREAM: base: soc: Handle custom soc information sysfs entries
2019-10-17 13:15:53 -07:00
ipc: fix sparc64 ipc() wrapper
2019-09-07 21:42:25 +02:00
sysfs: Fixes __BIN_ATTR_WO() macro
2019-10-02 10:06:45 +02:00
block: centralize PI remapping logic to the block layer
2019-09-17 20:03:49 -06:00
tcp: add rcu protection around tp->fastopen_rsk
2019-10-13 10:13:08 -07:00
uaccess: add missing __must_check attributes
2019-09-25 17:51:40 -07:00
vfs: Add file timestamp range support
2019-08-30 07:27:17 -07:00
posix-cpu-timers: Utilize timerqueue for storage
2019-08-28 11:50:43 +02:00
Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-09-16 17:25:49 -07:00
efi/tpm: Only set 'efi_tpm_final_log_size' after successful event log parsing
2019-10-07 15:24:36 +02:00
tracing: Make exported ftrace_set_clr_event non-static
2019-08-31 06:51:49 -04:00
uaccess: implement a proper unsafe_copy_to_user() and switch filldir over to it
2019-10-07 12:56:48 -07:00
vsock/virtio: remove unused 'work' field from 'struct virtio_vsock_pkt'
2019-10-28 04:25:04 -04:00
mm/vmalloc: modify struct vmap_area to reduce its size
2019-09-24 15:54:10 -07:00
w1: add 1-wire master driver for IP block found in SGI ASICs
2019-09-04 14:34:31 +02:00
Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-09-17 12:35:15 -07:00
workqueue: unconfine alloc/apply/free_workqueue_attrs()
2019-09-13 21:15:39 +10:00
writeback, memcg: Implement cgroup_writeback_by_id()
2019-08-27 09:22:38 -06:00
xarray.h: fix kernel-doc warning
2019-10-14 15:04:01 -07:00
FROMLIST: Add flags option to get xattr method paired to __vfs_getxattr
2019-11-05 13:50:57 -08:00
zpool: add malloc_support_movable to zpool_driver
2019-09-24 15:54:12 -07:00
