John Johansen
d79e57db45
apparmor: ensure that dfa state tables have entries
...
commit c27c6bd2c4d6b6bb779f9b722d5607993e1d5e5c upstream.
Currently it is possible to specify a state machine table with 0 length,
this is not valid as optional tables are specified by not defining
the table as present. Further this allows by-passing the base tables
range check against the next/check tables.
Fixes: d901d6a298 ("apparmor: dfa split verification of table headers")
Reported-by: Mike Salvatore <mike.salvatore@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-07-22 09:33:05 +02:00
..
apparmor
apparmor: ensure that dfa state tables have entries
2020-07-22 09:33:05 +02:00
integrity
ima: Set again build_ima_appraise variable
2020-06-22 09:31:17 +02:00
keys
mm: add kvfree_sensitive() for freeing sensitive data objects
2020-06-17 16:40:23 +02:00
loadpin
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
lockdown
lockdown: Allow unprivileged users to see lockdown status
2020-06-22 09:30:53 +02:00
safesetid
LSM: SafeSetID: Stop releasing uninitialized ruleset
2019-09-17 11:27:05 -07:00
selinux
selinux: fix double free
2020-06-24 17:50:48 +02:00
smack
Smack: slab-out-of-bounds in vsscanf
2020-06-17 16:40:36 +02:00
tomoyo
tomoyo: Use atomic_t for statistics counter
2020-02-05 21:22:41 +00:00
yama
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
commoncap.c
exec: Always set cap_ambient in cap_bprm_set_creds
2020-06-03 08:21:23 +02:00
device_cgroup.c
docs: cgroup-v1: add it to the admin-guide book
2019-07-15 11:03:02 -03:00
inode.c
Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-07-19 10:42:02 -07:00
Kconfig
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
Kconfig.hardening
meminit fix
2019-07-28 12:33:15 -07:00
lsm_audit.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
Makefile
security: Add a static lockdown policy LSM
2019-08-19 21:54:15 -07:00
min_addr.c
security.c
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00