linux-toradex.git/include/linux/security.h, branch v4.6-rc3

module: replace copy_module_from_fd with kernel version

2016-02-21T14:06:12+00:00

Replace copy_module_from_fd() with kernel_read_file_from_fd().

Although none of the upstreamed LSMs define a kernel_module_from_file
hook, IMA is called, based on policy, to prevent unsigned kernel modules
from being loaded by the original kernel module syscall and to
measure/appraise signed kernel modules.

The security function security_kernel_module_from_file() was called prior
to reading a kernel module.  Preventing unsigned kernel modules from being
loaded by the original kernel module syscall remains on the pre-read
kernel_read_file() security hook.  Instead of reading the kernel module
twice, once for measuring/appraising and again for loading the kernel
module, the signature validation is moved to the kernel_post_read_file()
security hook.

This patch removes the security_kernel_module_from_file() hook and security
call.

Signed-off-by: Mimi Zohar 
Acked-by: Kees Cook 
Acked-by: Luis R. Rodriguez 
Cc: Rusty Russell

security: define kernel_read_file hook

2016-02-21T14:06:09+00:00

The kernel_read_file security hook is called prior to reading the file
into memory.

Changelog v4+:
- export security_kernel_read_file()

Signed-off-by: Mimi Zohar 
Acked-by: Kees Cook 
Acked-by: Luis R. Rodriguez 
Acked-by: Casey Schaufler

firmware: replace call to fw_read_file_contents() with kernel version

2016-02-21T14:03:44+00:00

Replace the fw_read_file_contents with kernel_file_read_from_path().

Although none of the upstreamed LSMs define a kernel_fw_from_file hook,
IMA is called by the security function to prevent unsigned firmware from
being loaded and to measure/appraise signed firmware, based on policy.

Instead of reading the firmware twice, once for measuring/appraising the
firmware and again for reading the firmware contents into memory, the
kernel_post_read_file() security hook calculates the file hash based on
the in memory file buffer.  The firmware is read once.

This patch removes the LSM kernel_fw_from_file() hook and security call.

Changelog v4+:
- revert dropped buf->size assignment - reported by Sergey Senozhatsky
v3:
- remove kernel_fw_from_file hook
- use kernel_file_read_from_path() - requested by Luis
v2:
- reordered and squashed firmware patches
- fix MAX firmware size (Kees Cook)

Signed-off-by: Mimi Zohar 
Acked-by: Kees Cook 
Acked-by: Luis R. Rodriguez

ima: define a new hook to measure and appraise a file already in memory

2016-02-21T03:35:08+00:00

This patch defines a new IMA hook ima_post_read_file() for measuring
and appraising files read by the kernel. The caller loads the file into
memory before calling this function, which calculates the hash followed by
the normal IMA policy based processing.

Changelog v5:
- fail ima_post_read_file() if either file or buf is NULL
v3:
- rename ima_hash_and_process_file() to ima_post_read_file()

v1:
- split patch

Signed-off-by: Mimi Zohar 
Acked-by: Dmitry Kasatkin

vfs: define kernel_read_file_id enumeration

2016-02-18T22:14:04+00:00

To differentiate between the kernel_read_file() callers, this patch
defines a new enumeration named kernel_read_file_id and includes the
caller identifier as an argument.

Subsequent patches define READING_KEXEC_IMAGE, READING_KEXEC_INITRAMFS,
READING_FIRMWARE, READING_MODULE, and READING_POLICY.

Changelog v3:
- Replace the IMA specific enumeration with a generic one.

Signed-off-by: Mimi Zohar 
Acked-by: Kees Cook 
Acked-by: Luis R. Rodriguez 
Cc: Al Viro

vfs: define a generic function to read a file from the kernel

2016-02-18T22:14:03+00:00

For a while it was looked down upon to directly read files from Linux.
These days there exists a few mechanisms in the kernel that do just
this though to load a file into a local buffer.  There are minor but
important checks differences on each.  This patch set is the first
attempt at resolving some of these differences.

This patch introduces a common function for reading files from the kernel
with the corresponding security post-read hook and function.

Changelog v4+:
- export security_kernel_post_read_file() - Fengguang Wu
v3:
- additional bounds checking - Luis
v2:
- To simplify patch review, re-ordered patches

Signed-off-by: Mimi Zohar 
Reviewed-by: Luis R. Rodriguez 
Acked-by: Kees Cook 
Cc: Al Viro

security: Add hook to invalidate inode security labels

2015-12-24T16:09:40+00:00

Add a hook to invalidate an inode's security label when the cached
information becomes invalid.

Add the new hook in selinux: set a flag when a security label becomes
invalid.

Signed-off-by: Andreas Gruenbacher 
Reviewed-by: James Morris 
Acked-by:  Stephen Smalley 
Signed-off-by: Paul Moore

security: Make inode argument of inode_getsecid non-const

2015-12-24T16:09:39+00:00

Make the inode argument of the inode_getsecid hook non-const so that we
can use it to revalidate invalid security labels.

Signed-off-by: Andreas Gruenbacher 
Acked-by:  Stephen Smalley 
Signed-off-by: Paul Moore

security: Make inode argument of inode_getsecurity non-const

2015-12-24T16:09:39+00:00

Make the inode argument of the inode_getsecurity hook non-const so that
we can use it to revalidate invalid security labels.

Signed-off-by: Andreas Gruenbacher 
Acked-by:  Stephen Smalley 
Signed-off-by: Paul Moore

security: fix typo in security_task_prctl

2015-09-21T00:00:26+00:00

Signed-off-by: Jann Horn 
Reviewed-by: Andy Lutomirski 
Signed-off-by: Linus Torvalds