linux-toradex.git/security, branch v2.6.30.2

security: use mmap_min_addr indepedently of security models

2009-07-20T03:38:46+00:00

commit e0a94c2a63f2644826069044649669b5e7ca75d3 upstream.

This patch removes the dependency of mmap_min_addr on CONFIG_SECURITY.
It also sets a default mmap_min_addr of 4096.

mmapping of addresses below 4096 will only be possible for processes
with CAP_SYS_RAWIO.

Signed-off-by: Christoph Lameter 
Acked-by: Eric Paris 
Looks-ok-by: Linus Torvalds 
Signed-off-by: James Morris 
Signed-off-by: Greg Kroah-Hartman

IMA: open all files O_LARGEFILE

2009-07-02T23:49:37+00:00

commit 1a62e958fa4aaeeb752311b4f5e16b2a86737b23 upstream.

If IMA tried to measure a file which was larger than 4G dentry_open would fail
with -EOVERFLOW since IMA wasn't passing O_LARGEFILE.  This patch passes
O_LARGEFILE to all IMA opens to avoid this problem.

Signed-off-by: Eric Paris 
Acked-by: Mimi Zohar 
Signed-off-by: James Morris 
Signed-off-by: Greg Kroah-Hartman

IMA: Handle dentry_open failures

2009-07-02T23:49:37+00:00

commit f06dd16a03f6f7f72fab4db03be36e28c28c6fd6 upstream.

Currently IMA does not handle failures from dentry_open().  This means that we
leave a pointer set to ERR_PTR(errno) and then try to use it just a few lines
later in fput().  Oops.

Signed-off-by: Eric Paris 
Acked-by: Mimi Zohar 
Signed-off-by: James Morris 
Signed-off-by: Greg Kroah-Hartman

IMA: use current_cred() instead of current->cred

2009-07-02T23:49:35+00:00

commit 37bcbf13d32e4e453e9def79ee72bd953b88302f upstream.

Proper invocation of the current credentials is to use current_cred() not
current->cred.  This patches makes IMA use the new method.

Signed-off-by: Eric Paris 
Acked-by: Mimi Zohar 
Signed-off-by: James Morris 
Signed-off-by: Greg Kroah-Hartman

tomoyo: add missing call to cap_bprm_set_creds

2009-05-26T23:46:48+00:00

cap_bprm_set_creds() has to be called from security_bprm_set_creds().
TOMOYO forgot to call cap_bprm_set_creds() from tomoyo_bprm_set_creds()
and suid executables were not being working.

Make sure we call cap_bprm_set_creds() with TOMOYO, to set credentials
properly inside tomoyo_bprm_set_creds().

Signed-off-by: Herton Ronaldo Krzesinski 
Acked-by: Tetsuo Handa 
Signed-off-by: James Morris

Reduce path_lookup() abuses

2009-05-09T14:49:42+00:00

... use kern_path() where possible

[folded a fix from rdd]

Signed-off-by: Al Viro

selinux: Fix send_sigiotask hook

2009-05-04T22:31:03+00:00

The CRED patch incorrectly converted the SELinux send_sigiotask hook to
use the current task SID rather than the target task SID in its
permission check, yielding the wrong permission check.  This fixes the
hook function.  Detected by the ltp selinux testsuite and confirmed to
correct the test failure.

Signed-off-by:  Stephen Smalley 
Signed-off-by: James Morris

Smack: check for SMACK xattr validity in smack_inode_setxattr

2009-04-18T02:58:25+00:00

the following patch moves checks for SMACK xattr validity
from smack_inode_post_setxattr (which cannot return an error to the user)
to smack_inode_setxattr (which can return an error).

Signed-off-by: Etienne Basset 
Acked-by: Casey Schaufler 
Signed-off-by: James Morris

tomoyo: version bump to 2.2.0.

2009-04-13T23:15:02+00:00

Signed-off-by: Kentaro Takeda 
Signed-off-by: Tetsuo Handa 
Signed-off-by: Toshiharu Harada 
Signed-off-by: James Morris

keys: Handle there being no fallback destination keyring for request_key()

2009-04-09T17:41:19+00:00

When request_key() is called, without there being any standard process
keyrings on which to fall back if a destination keyring is not specified, an
oops is liable to occur when construct_alloc_key() calls down_write() on
dest_keyring's semaphore.

Due to function inlining this may be seen as an oops in down_write() as called
from request_key_and_link().

This situation crops up during boot, where request_key() is called from within
the kernel (such as in CIFS mounts) where nobody is actually logged in, and so
PAM has not had a chance to create a session keyring and user keyrings to act
as the fallback.

To fix this, make construct_alloc_key() not attempt to cache a key if there is
no fallback key if no destination keyring is given specifically.

Signed-off-by: David Howells 
Tested-by: Jeff Layton 
Signed-off-by: Linus Torvalds