Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Todd Kjos fc9c470cd5 binder: use cred instead of task for selinux checks ... commit 52f88693378a58094c538662ba652aff0253c4fe upstream. Since binder was integrated with selinux, it has passed 'struct task_struct' associated with the binder_proc to represent the source and target of transactions. The conversion of task to SID was then done in the hook implementations. It turns out that there are race conditions which can result in an incorrect security context being used. Fix by using the 'struct cred' saved during binder_open and pass it to the selinux subsystem. Cc: stable@vger.kernel.org # 5.14 (need backport for earlier stables) Fixes: 79af73079d ("Add security hooks to binder and implement the hooks for SELinux.") Suggested-by: Jann Horn <jannh@google.com> Signed-off-by: Todd Kjos <tkjos@google.com> Acked-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-11-17 09:48:16 +01:00
..
apparmor	apparmor: remove duplicate macro list_entry_is_head()	2021-09-26 14:07:06 +02:00
integrity	IMA: remove the dependency on CRYPTO_MD5	2021-09-15 09:47:41 +02:00
keys	KEYS: trusted: Fix migratable=1 failing	2021-03-04 10:26:44 +01:00
loadpin
lockdown
safesetid
selinux	binder: use cred instead of task for selinux checks	2021-11-17 09:48:16 +01:00
smack	Smack: Fix wrong semantics in smk_access_entry()	2021-09-22 12:26:27 +02:00
tomoyo
yama
commoncap.c	security: commoncap: fix -Wstringop-overread warning	2021-05-11 14:04:16 +02:00
device_cgroup.c
inode.c
Kconfig
Kconfig.hardening
lsm_audit.c	dump_common_audit_data(): fix racy accesses to ->d_name	2021-01-19 18:26:16 +01:00
Makefile
min_addr.c
security.c	binder: use cred instead of task for selinux checks	2021-11-17 09:48:16 +01:00