Jann Horn 49f3e22df7 apparmor: don't try to replace stale label in ptrace access check ...

[ Upstream commit 1f8266ff58840d698a1e96d2274189de1bdf7969 ]

As a comment above begin_current_label_crit_section() explains,
begin_current_label_crit_section() must run in sleepable context because
when label_is_stale() is true, aa_replace_current_label() runs, which uses
prepare_creds(), which can sleep.
Until now, the ptrace access check (which runs with a task lock held)
violated this rule.

Also add a might_sleep() assertion to begin_current_label_crit_section(),
because asserts are less likely to be ignored than comments.

Fixes: b2d09ae449ced ("apparmor: move ptrace checks to using labels")
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-01-27 14:46:04 +01:00

..

apparmor.h

apparmor: add mount mediation

2017-09-22 13:00:57 -07:00

apparmorfs.h

apparmor: add policy revision file interface

2017-06-10 17:11:27 -07:00

audit.h

apparmor: fix resource audit messages when auditing peer

2018-04-19 08:56:18 +02:00

capability.h

apparmor: move capability checks to using labels

2017-06-10 17:11:40 -07:00

context.h

apparmor: don't try to replace stale label in ptrace access check

2020-01-27 14:46:04 +01:00

crypto.h

apparmor: allow introspecting the loaded policy pre internal transform

2017-01-16 01:18:42 -08:00

domain.h

+ Features

2017-09-23 05:33:29 -10:00

file.h

apparmor: Refactor to remove bprm_secureexec hook

2017-08-01 12:03:06 -07:00

ipc.h

apparmor: add the ability to mediate signals

2017-09-22 13:00:57 -07:00

label.h

apparmor: add support for absolute root view based labels

2017-09-22 13:00:58 -07:00

lib.h

apparmor: move exec domain mediation to using labels

2017-06-10 17:11:46 -07:00

match.h

apparmor: fix restricted endian type warnings for dfa unpack

2017-01-16 01:18:54 -08:00

mount.h

apparmor: add mount mediation

2017-09-22 13:00:57 -07:00

path.h

apparmor: Move path lookup to using preallocated buffers

2017-06-08 11:29:34 -07:00

perms.h

apparmor: fix ptrace label match when matching stacked labels

2018-01-17 09:45:27 +01:00

policy_ns.h

apparmor: switch from profiles to using labels on contexts

2017-06-10 17:11:38 -07:00

policy_unpack.h

apparmor: move to per loaddata files, instead of replicating in profiles

2017-06-08 12:51:49 -07:00

policy.h

Revert "apparmor: add base infastructure for socket mediation"

2017-10-26 19:35:35 +02:00

procattr.h

apparmor: switch getprocattr to using label_print fns()

2017-06-10 17:11:39 -07:00

resource.h

apparmor: move resource checks to using labels

2017-06-10 17:11:40 -07:00

secid.h

apparmor: rename sid to secid

2017-01-16 00:42:17 -08:00

sig_names.h

apparmor: fix logging of the existence test for signals

2018-04-19 08:56:18 +02:00