Tetsuo Handa 0476fd4ff4 tomoyo: use realpath if symlink's pathname refers to procfs ... Fedora 41 has reached Linux 6.12 kernel with TOMOYO enabled. I observed that /usr/lib/systemd/systemd executes /usr/lib/systemd/systemd-executor by passing dirfd == 9 or dirfd == 16 upon execveat(). Commit ada1986d07 ("tomoyo: fallback to realpath if symlink's pathname does not exist") used realpath only if symlink's pathname does not exist. But an out of tree patch suggested that it will be reasonable to always use realpath if symlink's pathname refers to proc filesystem. Therefore, this patch changes the pathname used for checking "file execute" and the domainname used after a successful execve() request. Before: <kernel> /usr/lib/systemd/systemd file execute proc:/self/fd/16 exec.realpath="/usr/lib/systemd/systemd-executor" exec.argv[0]="/usr/lib/systemd/systemd-executor" file execute proc:/self/fd/9 exec.realpath="/usr/lib/systemd/systemd-executor" exec.argv[0]="/usr/lib/systemd/systemd-executor" <kernel> /usr/lib/systemd/systemd proc:/self/fd/16 file execute /usr/sbin/auditd exec.realpath="/usr/sbin/auditd" exec.argv[0]="/usr/sbin/auditd" <kernel> /usr/lib/systemd/systemd proc:/self/fd/16 /usr/sbin/auditd <kernel> /usr/lib/systemd/systemd proc:/self/fd/9 file execute /usr/bin/systemctl exec.realpath="/usr/bin/systemctl" exec.argv[0]="/usr/bin/systemctl" <kernel> /usr/lib/systemd/systemd proc:/self/fd/9 /usr/bin/systemctl After: <kernel> /usr/lib/systemd/systemd file execute /usr/lib/systemd/systemd-executor exec.realpath="/usr/lib/systemd/systemd-executor" exec.argv[0]="/usr/lib/systemd/systemd-executor" <kernel> /usr/lib/systemd/systemd /usr/lib/systemd/systemd-executor file execute /usr/bin/systemctl exec.realpath="/usr/bin/systemctl" exec.argv[0]="/usr/bin/systemctl" file execute /usr/sbin/auditd exec.realpath="/usr/sbin/auditd" exec.argv[0]="/usr/sbin/auditd" <kernel> /usr/lib/systemd/systemd /usr/lib/systemd/systemd-executor /usr/bin/systemctl <kernel> /usr/lib/systemd/systemd /usr/lib/systemd/systemd-executor /usr/sbin/auditd Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>		2024-12-17 19:03:39 +09:00
..
apparmor	module: Convert symbol namespace to string literal	2024-12-02 11:34:44 -08:00
bpf	bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0	2024-09-11 10:11:36 -07:00
integrity	lsm/stable-6.13 PR 20241129	2024-11-30 18:14:56 -08:00
ipe	ipe: fallback to platform keyring also if key in trusted keyring is rejected	2024-10-18 12:14:53 -07:00
keys	KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation	2024-11-04 21:24:24 +02:00
landlock	the bulk of struct fd memory safety stuff	2024-11-18 12:24:06 -08:00
loadpin	fdget(), more trivial conversions	2024-11-03 01:28:06 -05:00
lockdown	lockdown: Make lockdown_lsmid static	2024-08-15 12:11:42 -04:00
safesetid	lsm: mark the lsm_id variables are marked as static	2023-11-12 22:54:42 -05:00
selinux	selinux: use sk_to_full_sk() in selinux_ip_output()	2024-11-30 13:24:33 -08:00
smack	lsm: remove lsm_prop scaffolding	2024-10-11 14:34:16 -04:00
tomoyo	tomoyo: use realpath if symlink's pathname refers to procfs	2024-12-17 19:03:39 +09:00
yama	sysctl: treewide: constify the ctl_table argument of proc_handlers	2024-07-24 20:59:29 +02:00
commoncap.c	lsm: Refactor return value of LSM hook vm_enough_memory	2024-07-31 14:46:51 -04:00
device_cgroup.c	device_cgroup: Fix kernel-doc warnings in device_cgroup	2023-06-21 09:30:49 -04:00
inode.c	lsm: Use IS_ERR_OR_NULL() helper function	2024-08-29 11:12:13 -04:00
Kconfig	lsm/stable-6.12 PR 20240911	2024-09-16 18:19:47 +02:00
Kconfig.hardening	hardening: Adjust dependencies in selection of MODVERSIONS	2024-09-28 13:56:03 -07:00
lsm_audit.c	security: replace memcpy() with get_task_comm()	2024-11-05 17:12:29 -08:00
lsm_syscalls.c	lsm: use 32-bit compatible data types in LSM syscalls	2024-03-14 11:31:26 -04:00
Makefile	lsm: add IPE lsm	2024-08-19 22:36:26 -04:00
min_addr.c	sysctl: treewide: constify the ctl_table argument of proc_handlers	2024-07-24 20:59:29 +02:00
security.c	\n	2024-11-21 09:55:45 -08:00