Thiébaud Weksteen f45a77dd24 selinux: ignore unknown extended permissions ...

commit 900f83cf376bdaf798b6f5dcb2eae0c822e908b6 upstream.

When evaluating extended permissions, ignore unknown permissions instead
of calling BUG(). This commit ensures that future permissions can be
added without interfering with older kernels.

Cc: stable@vger.kernel.org
Fixes: fa1aa143ac4a ("selinux: extended permissions for ioctls")
Signed-off-by: Thiébaud Weksteen <tweek@google.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-01-09 13:23:33 +01:00

..

apparmor

apparmor: fix 'Do simple duplicate message elimination'

2024-12-14 19:44:34 +01:00

integrity

ima: detect changes to the backing overlay file

2023-12-08 08:44:27 +01:00

keys

security/keys: fix slab-out-of-bounds in key_task_permission

2024-11-17 14:58:50 +01:00

loadpin

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

lockdown

lockdown: also lock down previous kgdb use

2022-06-06 08:33:48 +02:00

safesetid

LSM: SafeSetID: Stop releasing uninitialized ruleset

2019-09-17 11:27:05 -07:00

selinux

selinux: ignore unknown extended permissions

2025-01-09 13:23:33 +01:00

smack

smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso

2024-11-08 16:20:30 +01:00

tomoyo

tomoyo: fallback to realpath if symlink's pathname does not exist

2024-11-08 16:20:41 +01:00

yama

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

commoncap.c

capabilities: fix potential memleak on error path from vfs_getxattr_alloc()

2022-11-10 17:57:55 +01:00

device_cgroup.c

device_cgroup: Roll back to original exceptions after copy failure

2023-01-18 11:41:50 +01:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

proc: add config & param to block forcing mem writes

2024-11-08 16:20:38 +01:00

Kconfig.hardening

meminit fix

2019-07-28 12:33:15 -07:00

lsm_audit.c

dump_common_audit_data(): fix racy accesses to ->d_name

2021-01-19 18:26:16 +01:00

Makefile

security: Add a static lockdown policy LSM

2019-08-19 21:54:15 -07:00

min_addr.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

security.c

lsm: new security_file_ioctl_compat() hook

2024-02-23 08:25:15 +01:00