Kernel/linux-stable
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2025-01-18 11:17:07 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
linux-stable/security/apparmor
History
John Johansen 8c62ed27a1 apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock 
aa_xattrs_match() is unfortunately calling vfs_getxattr_alloc() from a
context protected by an rcu_read_lock. This can not be done as
vfs_getxattr_alloc() may sleep regardles of the gfp_t value being
passed to it.

Fix this by breaking the rcu_read_lock on the policy search when the
xattr match feature is requested and restarting the search if a policy
changes occur.

Fixes: 8e51f9087f40 ("apparmor: Add support for attaching profiles via xattr, presence and value")
Reported-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Reported-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: John Johansen <john.johansen@canonical.com>
2020-01-04 15:56:44 -08:00
..
include
+ Features
2019-12-03 12:51:35 -08:00
.gitignore
apparmor: add base infastructure for socket mediation
2018-03-13 17:25:48 -07:00
apparmorfs.c
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
2020-01-04 15:56:44 -08:00
audit.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
capability.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
crypto.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
domain.c
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
2020-01-04 15:56:44 -08:00
file.c
apparmor: only get a label reference if the fast path check fails
2020-01-02 05:31:40 -08:00
ipc.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
Kconfig
+ Features
2019-12-03 12:51:35 -08:00
label.c
+ Features
2019-12-03 12:51:35 -08:00
lib.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
lsm.c
+ Features
2019-12-03 12:51:35 -08:00
Makefile
apparmor: add base infastructure for socket mediation
2018-03-13 17:25:48 -07:00
match.c
+ Features
2019-12-03 12:51:35 -08:00
mount.c
apparmor: fix bind mounts aborting with -ENOMEM
2020-01-02 05:31:40 -08:00
net.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
nulldfa.in
apparmor: cleanup add proper line wrapping to nulldfa.in
2018-02-09 11:30:01 -08:00
path.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
policy_ns.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
policy_unpack.c
+ Features
2019-12-03 12:51:35 -08:00
policy.c
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
2020-01-04 15:56:44 -08:00
procattr.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
resource.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
secid.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
stacksplitdfa.in
apparmor: use the dfa to do label parse string splitting
2018-02-09 11:30:01 -08:00
task.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00