Paul Moore a3727a8bac selinux,smack: fix subjective/objective credential use mixups ... Jann Horn reported a problem with commit eb1231f73c ("selinux: clarify task subjective and objective credentials") where some LSM hooks were attempting to access the subjective credentials of a task other than the current task. Generally speaking, it is not safe to access another task's subjective credentials and doing so can cause a number of problems. Further, while looking into the problem, I realized that Smack was suffering from a similar problem brought about by a similar commit 1fb057dcde ("smack: differentiate between subjective and objective task credentials"). This patch addresses this problem by restoring the use of the task's objective credentials in those cases where the task is other than the current executing task. Not only does this resolve the problem reported by Jann, it is arguably the correct thing to do in these cases. Cc: stable@vger.kernel.org Fixes: eb1231f73c ("selinux: clarify task subjective and objective credentials") Fixes: 1fb057dcde ("smack: differentiate between subjective and objective task credentials") Reported-by: Jann Horn <jannh@google.com> Acked-by: Eric W. Biederman <ebiederm@xmission.com> Acked-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Paul Moore <paul@paul-moore.com>		2021-09-23 12:30:59 -04:00
..
include	mctp: Add MCTP base	2021-07-29 15:06:49 +01:00
ss	Merge tag 'selinux-pr-20210830' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux	2021-08-31 12:53:34 -07:00
.gitignore	.gitignore: add SPDX License Identifier	2020-03-25 11:50:48 +01:00
avc.c	selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit()	2021-06-11 13:11:45 -04:00
hooks.c	selinux,smack: fix subjective/objective credential use mixups	2021-09-23 12:30:59 -04:00
ibpkey.c	selinux: remove unused global variables	2021-01-12 09:49:01 -05:00
ima.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
Kconfig	Documentation,selinux: deprecate setting checkreqprot to 1	2020-02-10 10:49:01 -05:00
Makefile	selinux: include a consumer of the new IMA critical data hook	2021-01-14 23:41:46 -05:00
netif.c	selinux: remove unused global variables	2021-01-12 09:49:01 -05:00
netlabel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
netlink.c	selinux: mark some global variables __ro_after_init	2021-01-12 10:08:55 -05:00
netnode.c	selinux: remove unused global variables	2021-01-12 09:49:01 -05:00
netport.c	selinux: remove unused global variables	2021-01-12 09:49:01 -05:00
nlmsgtab.c	nexthop: Add netlink defines and enumerators for resilient NH groups	2021-03-11 16:12:59 -08:00
selinuxfs.c	selinux/stable-5.13 PR 20210426	2021-04-27 13:42:11 -07:00
status.c	selinux: move status variables out of selinux_ss	2020-02-10 10:49:01 -05:00
xfrm.c	selinux: delete selinux_xfrm_policy_lookup() useless argument	2021-05-10 21:38:31 -04:00