Casey Schaufler dd93734022 Smack: Provide read control for io_uring_cmd ...

Limit io_uring "cmd" options to files for which the caller has
Smack read access. There may be cases where the cmd option may
be closer to a write access than a read, but there is no way
to make that determination.

Cc: stable@vger.kernel.org
Fixes: ee692a21e9bf ("fs,io_uring: add infrastructure for uring-cmd")
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2022-08-26 14:56:35 -04:00

..

Kconfig

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

Makefile

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

smack_access.c

smack: Replace kzalloc + strncpy with kstrndup

2022-08-01 11:26:09 -07:00

smack_lsm.c

Smack: Provide read control for io_uring_cmd

2022-08-26 14:56:35 -04:00

smack_netfilter.c

smack: remove duplicated hook function

2021-10-12 08:23:52 -07:00

smack.h

lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()

2021-11-22 17:52:47 -05:00

smackfs.c

Cleanups (and one fix) around struct mount handling.

2022-06-04 19:00:05 -07:00