Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Miklos Szeredi 43e3cf46af cap: fix conversions on getxattr ... [ Upstream commit f2b00be488730522d0fb7a8a5de663febdcefe0a ] If a capability is stored on disk in v2 format cap_inode_getsecurity() will currently return in v2 format unconditionally. This is wrong: v2 cap should be equivalent to a v3 cap with zero rootid, and so the same conversions performed on it. If the rootid cannot be mapped, v3 is returned unconverted. Fix this so that both v2 and v3 return -EOVERFLOW if the rootid (or the owner of the fs user namespace in case of v2) cannot be mapped into the current user namespace. Signed-off-by: Miklos Szeredi <mszeredi@redhat.com> Acked-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-02-17 10:35:15 +01:00
..
apparmor	apparmor: ensure that dfa state tables have entries	2020-07-22 09:33:05 +02:00
integrity	ima: Don't modify file descriptor mode on the fly	2020-12-30 11:51:39 +01:00
keys
loadpin
lockdown	lockdown: Allow unprivileged users to see lockdown status	2020-06-22 09:30:53 +02:00
safesetid
selinux	selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling	2020-12-30 11:51:05 +01:00
smack	Smack: prevent underflow in smk_set_cipso()	2020-08-19 08:16:16 +02:00
tomoyo
yama
commoncap.c	cap: fix conversions on getxattr	2021-02-17 10:35:15 +01:00
device_cgroup.c	device_cgroup: Fix RCU list debugging warning	2020-10-01 13:18:13 +02:00
inode.c
Kconfig
Kconfig.hardening
lsm_audit.c	dump_common_audit_data(): fix racy accesses to ->d_name	2021-01-19 18:26:16 +01:00
Makefile
min_addr.c
security.c