Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Christian Göttsche 3899c1d158 security: keys: perform capable check only on privileged operations ... [ Upstream commit 2d7f105edbb3b2be5ffa4d833abbf9b6965e9ce7 ] If the current task fails the check for the queried capability via `capable(CAP_SYS_ADMIN)` LSMs like SELinux generate a denial message. Issuing such denial messages unnecessarily can lead to a policy author granting more privileges to a subject than needed to silence them. Reorder CAP_SYS_ADMIN checks after the check whether the operation is actually privileged. Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-09-23 10:59:39 +02:00
..
apparmor	apparmor: Use pointer to struct aa_label for lbs_cred	2023-01-18 11:41:17 +01:00
integrity	IMA: allow/fix UML builds	2023-08-30 16:27:11 +02:00
keys	security: keys: perform capable check only on privileged operations	2023-09-23 10:59:39 +02:00
loadpin
lockdown	lockdown: also lock down previous kgdb use	2022-06-06 08:33:48 +02:00
safesetid
selinux	selinux: don't use make's grouped targets feature yet	2023-06-09 10:29:02 +02:00
smack	Fix incorrect type in assignment of ipv6 port for audit	2022-04-15 14:18:22 +02:00
tomoyo	tomoyo: fix broken dependency on *.conf.default	2023-02-06 07:52:35 +01:00
yama
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 17:57:55 +01:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-18 11:41:50 +01:00
inode.c
Kconfig	fortify: Explicitly disable Clang support	2021-11-21 13:38:50 +01:00
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c	ima: Align ima_file_mmap() parameters with mmap_file LSM hook	2023-03-11 16:44:02 +01:00