linux-stable.git/include/linux/lsm_hooks.h, branch v4.11.2

Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux into next

2017-02-09T23:28:49+00:00

LSM: Add /sys/kernel/security/lsm

2017-01-19T02:18:29+00:00

I am still tired of having to find indirect ways to determine
what security modules are active on a system. I have added
/sys/kernel/security/lsm, which contains a comma separated
list of the active security modules. No more groping around
in /proc/filesystems or other clever hacks.

Unchanged from previous versions except for being updated
to the latest security next branch.

Signed-off-by: Casey Schaufler 
Acked-by: John Johansen 
Acked-by: Paul Moore 
Acked-by: Kees Cook 
Signed-off-by: James Morris

security,selinux,smack: kill security_task_wait hook

2017-01-12T16:10:57+00:00

As reported by yangshukui, a permission denial from security_task_wait()
can lead to a soft lockup in zap_pid_ns_processes() since it only expects
sys_wait4() to return 0 or -ECHILD. Further, security_task_wait() can
in general lead to zombies; in the absence of some way to automatically
reparent a child process upon a denial, the hook is not useful.  Remove
the security hook and its implementations in SELinux and Smack.  Smack
already removed its check from its hook.

Reported-by: yangshukui 
Signed-off-by: Stephen Smalley 
Acked-by: Casey Schaufler 
Acked-by: Oleg Nesterov 
Signed-off-by: Paul Moore

security: Fix inode_getattr documentation

2017-01-10T06:39:23+00:00

Replace arguments @mnt and @dentry with @path.

Signed-off-by: Mickaël Salaün 
Acked-by: Serge Hallyn 
Signed-off-by: James Morris

proc,security: move restriction on writing /proc/pid/attr nodes to proc

2017-01-09T15:07:31+00:00

Processes can only alter their own security attributes via
/proc/pid/attr nodes.  This is presently enforced by each individual
security module and is also imposed by the Linux credentials
implementation, which only allows a task to alter its own credentials.
Move the check enforcing this restriction from the individual
security modules to proc_pid_attr_write() before calling the security hook,
and drop the unnecessary task argument to the security hook since it can
only ever be the current task.

Signed-off-by: Stephen Smalley 
Acked-by: Casey Schaufler 
Acked-by: John Johansen 
Signed-off-by: Paul Moore

Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/selinux into next

2016-09-19T02:27:10+00:00

module: Fully remove the kernel_module_from_file hook

2016-08-09T00:58:57+00:00

Remove remaining kernel_module_from_file hook left by commit
a1db74209483 ("module: replace copy_module_from_fd with kernel version")

Signed-off-by: Mickaël Salaün 
Cc: Rusty Russell 
Acked-by: Kees Cook 
Signed-off-by: Mimi Zohar 
Signed-off-by: James Morris

security, overlayfs: Provide hook to correctly label newly created files

2016-08-09T00:46:46+00:00

During a new file creation we need to make sure new file is created with the
right label. New file is created in upper/ so effectively file should get
label as if task had created file in upper/.

We switched to mounter's creds for actual file creation. Also if there is a
whiteout present, then file will be created in work/ dir first and then
renamed in upper. In none of the cases file will be labeled as we want it to
be.

This patch introduces a new hook dentry_create_files_as(), which determines
the label/context dentry will get if it had been created by task in upper
and modify passed set of creds appropriately. Caller makes use of these new
creds for file creation.

Signed-off-by: Vivek Goyal 
Acked-by: Stephen Smalley 
[PM: fix whitespace issues found with checkpatch.pl]
[PM: changes to use stat->mode in ovl_create_or_link()]
Signed-off-by: Paul Moore

security,overlayfs: Provide security hook for copy up of xattrs for overlay file

2016-08-09T00:42:13+00:00

Provide a security hook which is called when xattrs of a file are being
copied up. This hook is called once for each xattr and LSM can return
0 if the security module wants the xattr to be copied up, 1 if the
security module wants the xattr to be discarded on the copy, -EOPNOTSUPP
if the security module does not handle/manage the xattr, or a -errno
upon an error.

Signed-off-by: David Howells 
Signed-off-by: Vivek Goyal 
Acked-by: Stephen Smalley 
[PM: whitespace cleanup for checkpatch.pl]
Signed-off-by: Paul Moore

security, overlayfs: provide copy up security hook for unioned files

2016-08-09T00:06:53+00:00

Provide a security hook to label new file correctly when a file is copied
up from lower layer to upper layer of a overlay/union mount.

This hook can prepare a new set of creds which are suitable for new file
creation during copy up. Caller will use new creds to create file and then
revert back to old creds and release new creds.

Signed-off-by: Vivek Goyal 
Acked-by: Stephen Smalley 
[PM: whitespace cleanup to appease checkpatch.pl]
Signed-off-by: Paul Moore