Paul Moore
eeef0d9fd4
selinux: properly handle multiple messages in selinux_netlink_send()
...
commit fb73974172ffaaf57a7c42f35424d9aece1a5af6 upstream.
Fix the SELinux netlink_send hook to properly handle multiple netlink
messages in a single sk_buff; each message is parsed and subject to
SELinux access control. Prior to this patch, SELinux only inspected
the first message in the sk_buff.
Cc: stable@vger.kernel.org
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Reviewed-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-05-06 08:15:17 +02:00
..
apparmor
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
2020-01-09 10:20:00 +01:00
integrity
efi: Only print errors about failing to get certs if EFI vars are found
2020-03-12 13:00:14 +01:00
keys
KEYS: Avoid false positive ENOMEM error on key read
2020-04-29 16:33:11 +02:00
loadpin
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
lockdown
efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
2019-10-31 09:40:21 +01:00
safesetid
LSM: SafeSetID: Stop releasing uninitialized ruleset
2019-09-17 11:27:05 -07:00
selinux
selinux: properly handle multiple messages in selinux_netlink_send()
2020-05-06 08:15:17 +02:00
smack
broken ping to ipv6 linklocal addresses on debian buster
2020-02-11 04:35:43 -08:00
tomoyo
tomoyo: Use atomic_t for statistics counter
2020-02-05 21:22:41 +00:00
yama
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
commoncap.c
Merge branch 'next-lsm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-07-09 12:24:21 -07:00
device_cgroup.c
docs: cgroup-v1: add it to the admin-guide book
2019-07-15 11:03:02 -03:00
inode.c
Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-07-19 10:42:02 -07:00
Kconfig
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
Kconfig.hardening
meminit fix
2019-07-28 12:33:15 -07:00
lsm_audit.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
Makefile
security: Add a static lockdown policy LSM
2019-08-19 21:54:15 -07:00
min_addr.c
security.c
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00