linux-toradex.git/security/security.c, branch v3.14.3

selinux: add gfp argument to security_xfrm_policy_alloc and fix callers

2014-03-10T07:30:02+00:00

security_xfrm_policy_alloc can be called in atomic context so the
allocation should be done with GFP_ATOMIC. Add an argument to let the
callers choose the appropriate way. In order to do so a gfp argument
needs to be added to the method xfrm_policy_alloc_security in struct
security_operations and to the internal function
selinux_xfrm_alloc_user. After that switch to GFP_ATOMIC in the atomic
callers and leave GFP_KERNEL as before for the rest.
The path that needed the gfp argument addition is:
security_xfrm_policy_alloc -> security_ops.xfrm_policy_alloc_security ->
all users of xfrm_policy_alloc_security (e.g. selinux_xfrm_policy_alloc) ->
selinux_xfrm_alloc_user (here the allocation used to be GFP_KERNEL only)

Now adding a gfp argument to selinux_xfrm_alloc_user requires us to also
add it to security_context_to_sid which is used inside and prior to this
patch did only GFP_KERNEL allocation. So add gfp argument to
security_context_to_sid and adjust all of its callers as well.

CC: Paul Moore 
CC: Dave Jones 
CC: Steffen Klassert 
CC: Fan Du 
CC: David S. Miller 
CC: LSM list 
CC: SELinux list 

Signed-off-by: Nikolay Aleksandrov 
Acked-by: Paul Moore 
Signed-off-by: Steffen Klassert

Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into ra-next

2013-10-22T11:26:41+00:00

Merge git://git.infradead.org/users/eparis/selinux

2013-09-18T17:52:20+00:00

Conflicts:
	security/selinux/hooks.c

Pull Eric's existing SELinux tree as there are a number of patches in
there that are not yet upstream.  There was some minor fixup needed to
resolve a conflict in security/selinux/hooks.c:selinux_set_mnt_opts()
between the labeled NFS patches and Eric's security_fs_use()
simplification patch.

lsm: split the xfrm_state_alloc_security() hook implementation

2013-07-25T17:01:25+00:00

The xfrm_state_alloc_security() LSM hook implementation is really a
multiplexed hook with two different behaviors depending on the
arguments passed to it by the caller.  This patch splits the LSM hook
implementation into two new hook implementations, which match the
LSM hooks in the rest of the kernel:

 * xfrm_state_alloc
 * xfrm_state_alloc_acquire

Also included in this patch are the necessary changes to the SELinux
code; no other LSMs are affected.

Signed-off-by: Paul Moore 
Signed-off-by: Eric Paris

xattr: Constify ->name member of "struct xattr".

2013-07-25T09:30:03+00:00

Since everybody sets kstrdup()ed constant string to "struct xattr"->name but
nobody modifies "struct xattr"->name , we can omit kstrdup() and its failure
checking by constifying ->name member of "struct xattr".

Signed-off-by: Tetsuo Handa 
Reviewed-by: Joel Becker  [ocfs2]
Acked-by: Serge E. Hallyn 
Acked-by: Casey Schaufler 
Acked-by: Mimi Zohar 
Reviewed-by: Paul Moore 
Tested-by: Paul Moore 
Acked-by: Eric Paris 
Signed-off-by: James Morris

NFS: Extend NFS xattr handlers to accept the security namespace

2013-06-08T20:20:17+00:00

The existing NFSv4 xattr handlers do not accept xattr calls to the security
namespace. This patch extends these handlers to accept xattrs from the security
namespace in addition to the default NFSv4 ACL namespace.

Acked-by: James Morris 
Signed-off-by: Matthew N. Dodd 
Signed-off-by: Miguel Rodel Felipe 
Signed-off-by: Phua Eu Gene 
Signed-off-by: Khin Mi Mi Aung 
Signed-off-by: Trond Myklebust

LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data.

2013-06-08T20:20:12+00:00

There is no way to differentiate if a text mount option is passed from user
space or the kernel. A flags field is being added to the
security_sb_set_mnt_opts hook to allow for in kernel security flags to be sent
to the LSM for processing in addition to the text options received from mount.
This patch also updated existing code to fix compilation errors.

Acked-by: Eric Paris 
Acked-by: James Morris 
Signed-off-by: David P. Quigley 
Signed-off-by: Miguel Rodel Felipe 
Signed-off-by: Phua Eu Gene 
Signed-off-by: Khin Mi Mi Aung 
Signed-off-by: Trond Myklebust

Security: Add Hook to test if the particular xattr is part of a MAC model.

2013-06-08T20:20:11+00:00

The interface to request security labels from user space is the xattr
interface. When requesting the security label from an NFS server it is
important to make sure the requested xattr actually is a MAC label. This allows
us to make sure that we get the desired semantics from the attribute instead of
something else such as capabilities or a time based LSM.

Acked-by: Eric Paris 
Acked-by: James Morris 
Signed-off-by: Matthew N. Dodd 
Signed-off-by: Miguel Rodel Felipe 
Signed-off-by: Phua Eu Gene 
Signed-off-by: Khin Mi Mi Aung 
Signed-off-by: Trond Myklebust

Security: Add hook to calculate context based on a negative dentry.

2013-06-08T20:19:41+00:00

There is a time where we need to calculate a context without the
inode having been created yet. To do this we take the negative dentry and
calculate a context based on the process and the parent directory contexts.

Acked-by: Eric Paris 
Acked-by: James Morris 
Signed-off-by: Matthew N. Dodd 
Signed-off-by: Miguel Rodel Felipe 
Signed-off-by: Phua Eu Gene 
Signed-off-by: Khin Mi Mi Aung 
Signed-off-by: Steve Dickson 
Signed-off-by: Trond Myklebust

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2013-04-30T23:27:51+00:00

Pull security subsystem update from James Morris:
 "Just some minor updates across the subsystem"

* 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:
  ima: eliminate passing d_name.name to process_measurement()
  TPM: Retry SaveState command in suspend path
  tpm/tpm_i2c_infineon: Add small comment about return value of __i2c_transfer
  tpm/tpm_i2c_infineon.c: Add OF attributes type and name to the of_device_id table entries
  tpm_i2c_stm_st33: Remove duplicate inclusion of header files
  tpm: Add support for new Infineon I2C TPM (SLB 9645 TT 1.2 I2C)
  char/tpm: Convert struct i2c_msg initialization to C99 format
  drivers/char/tpm/tpm_ppi: use strlcpy instead of strncpy
  tpm/tpm_i2c_stm_st33: formatting and white space changes
  Smack: include magic.h in smackfs.c
  selinux: make security_sb_clone_mnt_opts return an error on context mismatch
  seccomp: allow BPF_XOR based ALU instructions.
  Fix NULL pointer dereference in smack_inode_unlink() and smack_inode_rmdir()
  Smack: add support for modification of existing rules
  smack: SMACK_MAGIC to include/uapi/linux/magic.h
  Smack: add missing support for transmute bit in smack_str_from_perm()
  Smack: prevent revoke-subject from failing when unseen label is written to it
  tomoyo: use DEFINE_SRCU() to define tomoyo_ss
  tomoyo: use DEFINE_SRCU() to define tomoyo_ss