malhuda/msm-4.14
1
0
Fork 0
mirror of https://github.com/rd-stuffs/msm-4.14.git synced 2025-02-20 11:45:48 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
msm-4.14/security
History
Christian Göttsche 9121d71c01 security: keys: perform capable check only on privileged operations 
[ Upstream commit 2d7f105edbb3b2be5ffa4d833abbf9b6965e9ce7 ]

If the current task fails the check for the queried capability via
`capable(CAP_SYS_ADMIN)` LSMs like SELinux generate a denial message.
Issuing such denial messages unnecessarily can lead to a policy author
granting more privileges to a subject than needed to silence them.

Reorder CAP_SYS_ADMIN checks after the check whether the operation is
actually privileged.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-09-23 10:46:53 +02:00
..
apparmor
apparmor: fix a memleak in multi_transaction_new()
2023-01-18 09:26:21 +01:00
integrity
integrity: Fix possible multiple allocation in integrity_inode_get()
2023-08-11 11:33:41 +02:00
keys
security: keys: perform capable check only on privileged operations
2023-09-23 10:46:53 +02:00
loadpin
…
selinux
selinux: don't use make's grouped targets feature yet
2023-06-09 10:22:54 +02:00
smack
Fix incorrect type in assignment of ipv6 port for audit
2022-04-20 09:08:21 +02:00
tomoyo
tomoyo: fix broken dependency on *.conf.default
2023-02-06 07:46:28 +01:00
yama
Yama: Check for pid death before checking ancestry
2019-01-23 08:09:48 +01:00
commoncap.c
capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
2022-11-10 15:47:23 +01:00
device_cgroup.c
device_cgroup: Roll back to original exceptions after copy failure
2023-01-18 09:26:38 +01:00
inode.c
securityfs: fix use-after-free on symlink traversal
2019-05-25 18:25:34 +02:00
Kconfig
/dev/mem: Add bounce buffer for copy-out
2018-03-24 11:01:24 +01:00
lsm_audit.c
dump_common_audit_data(): fix racy accesses to ->d_name
2021-01-23 15:48:43 +01:00
Makefile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
min_addr.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
security.c
ima: Align ima_file_mmap() parameters with mmap_file LSM hook
2023-03-11 16:26:46 +01:00