Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Konstantin Andreev 2859267753 smack: unix sockets: fix accept()ed socket label ... [ Upstream commit e86cac0acdb1a74f608bacefe702f2034133a047 ] When a process accept()s connection from a unix socket (either stream or seqpacket) it gets the socket with the label of the connecting process. For example, if a connecting process has a label 'foo', the accept()ed socket will also have 'in' and 'out' labels 'foo', regardless of the label of the listener process. This is because kernel creates unix child sockets in the context of the connecting process. I do not see any obvious way for the listener to abuse alien labels coming with the new socket, but, to be on the safe side, it's better fix new socket labels. Signed-off-by: Konstantin Andreev <andreev@swemel.ru> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-09-12 11:03:52 +02:00
..
apparmor	apparmor: fix possible NULL pointer dereference	2024-09-12 11:03:49 +02:00
integrity	ima: detect changes to the backing overlay file	2023-12-08 08:44:27 +01:00
keys	security: keys: perform capable check only on privileged operations	2023-09-23 10:59:39 +02:00
loadpin
lockdown
safesetid
selinux	selinux: fix potential counting error in avc_add_xperms_decision()	2024-09-04 13:14:50 +02:00
smack	smack: unix sockets: fix accept()ed socket label	2024-09-12 11:03:52 +02:00
tomoyo	lsm: new security_file_ioctl_compat() hook	2024-02-23 08:25:15 +01:00
yama
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 17:57:55 +01:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-18 11:41:50 +01:00
inode.c
Kconfig
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c	lsm: new security_file_ioctl_compat() hook	2024-02-23 08:25:15 +01:00