linux-toradex.git/security, branch v3.2.14

ima: fix Kconfig dependencies

2012-04-02T16:52:36+00:00

commit f4a0391dfa91155bd961673b31eb42d9d45c799d upstream.

Fix the following build warning:
warning: (IMA) selects TCG_TPM which has unmet direct dependencies
(HAS_IOMEM && EXPERIMENTAL)

Suggested-by: Rajiv Andrade 
Signed-off-by: Fabio Estevam 
Signed-off-by: Rajiv Andrade 
Signed-off-by: Mimi Zohar 
Signed-off-by: Greg Kroah-Hartman

Security: tomoyo: add .gitignore file

2012-03-01T00:30:48+00:00

commit 735e93c70434614bffac4a914ca1da72e37d43c0 upstream.

This adds the .gitignore file for the autogenerated TOMOYO files to keep
git from complaining after building things.

Cc: Kentaro Takeda 
Cc: Tetsuo Handa 
Cc: James Morris 
Acked-by: Tetsuo Handa 
Signed-off-by: James Morris 
Signed-off-by: Greg Kroah-Hartman

TOMOYO: Accept \000 as a valid character.

2012-01-26T00:13:45+00:00

commit 25add8cf99c9ec8b8dc0acd8b9241e963fc0d29c upstream.

TOMOYO 2.5 in Linux 3.2 and later handles Unix domain socket's address.
Thus, tomoyo_correct_word2() needs to accept \000 as a valid character, or
TOMOYO 2.5 cannot handle Unix domain's abstract socket address.

Reported-by: Steven Allen 
Signed-off-by: Tetsuo Handa 
Signed-off-by: James Morris 
Signed-off-by: Greg Kroah-Hartman

ima: fix invalid memory reference

2012-01-26T00:13:21+00:00

commit 7b7e5916aa2f46e57f8bd8cb89c34620ebfda5da upstream.

Don't free a valid measurement entry on TPM PCR extend failure.

Signed-off-by: Roberto Sassu 
Signed-off-by: Mimi Zohar 
Signed-off-by: Greg Kroah-Hartman

ima: free duplicate measurement memory

2012-01-26T00:13:20+00:00

commit 45fae7493970d7c45626ccd96d4a74f5f1eea5a9 upstream.

Info about new measurements are cached in the iint for performance.  When
the inode is flushed from cache, the associated iint is flushed as well.
Subsequent access to the inode will cause the inode to be re-measured and
will attempt to add a duplicate entry to the measurement list.

This patch frees the duplicate measurement memory, fixing a memory leak.

Signed-off-by: Roberto Sassu 
Signed-off-by: Mimi Zohar 
Signed-off-by: Greg Kroah-Hartman

security: Fix security_old_inode_init_security() when CONFIG_SECURITY is not set

2012-01-04T00:12:19+00:00

Commit 1e39f384bb01 ("evm: fix build problems") makes the stub version
of security_old_inode_init_security() return 0 when CONFIG_SECURITY is
not set.

But that makes callers such as reiserfs_security_init() assume that
security_old_inode_init_security() has set name, value, and len
arguments properly - but security_old_inode_init_security() left them
uninitialized which then results in interesting failures.

Revert security_old_inode_init_security() to the old behavior of
returning EOPNOTSUPP since both callers (reiserfs and ocfs2) handle this
just fine.

[ Also fixed the S_PRIVATE(inode) case of the actual non-stub
  security_old_inode_init_security() function to return EOPNOTSUPP
  for the same reason, as pointed out by Mimi Zohar.

  It got incorrectly changed to match the new function in commit
  fb88c2b6cbb1: "evm: fix security/security_old_init_security return
  code".   - Linus ]

Reported-by: Jorge Bastos 
Acked-by: James Morris 
Acked-by: Mimi Zohar 
Signed-off-by: Jan Kara 
Signed-off-by: Linus Torvalds

SELinux: Fix RCU deref check warning in sel_netport_insert()

2011-12-21T00:28:56+00:00

Fix the following bug in sel_netport_insert() where rcu_dereference() should
be rcu_dereference_protected() as sel_netport_lock is held.

===================================================
[ INFO: suspicious rcu_dereference_check() usage. ]
---------------------------------------------------
security/selinux/netport.c:127 invoked rcu_dereference_check() without protection!

other info that might help us debug this:

rcu_scheduler_active = 1, debug_locks = 0
1 lock held by ossec-rootcheck/3323:
 #0:  (sel_netport_lock){+.....}, at: [] sel_netport_sid+0xbb/0x226

stack backtrace:
Pid: 3323, comm: ossec-rootcheck Not tainted 3.1.0-rc8-fsdevel+ #1095
Call Trace:
 [] lockdep_rcu_dereference+0xa7/0xb0
 [] sel_netport_sid+0x1b7/0x226
 [] ? sel_netport_avc_callback+0xbc/0xbc
 [] selinux_socket_bind+0x115/0x230
 [] ? might_fault+0x4e/0x9e
 [] ? might_fault+0x97/0x9e
 [] security_socket_bind+0x11/0x13
 [] sys_bind+0x56/0x95
 [] ? sysret_check+0x27/0x62
 [] ? trace_hardirqs_on_caller+0x11e/0x155
 [] ? audit_syscall_entry+0x17b/0x1ae
 [] ? trace_hardirqs_on_thunk+0x3a/0x3f
 [] system_call_fastpath+0x16/0x1b

Signed-off-by: David Howells 
Acked-by: Paul Moore 
Acked-by: Eric Dumazet 
Cc: stable@kernel.org
Signed-off-by: James Morris

evm: prevent racing during tfm allocation

2011-12-20T15:50:08+00:00

There is a small chance of racing during tfm allocation.
This patch fixes it.

Signed-off-by: Dmitry Kasatkin 
Acked-by: Mimi Zohar 
Signed-off-by: James Morris

evm: key must be set once during initialization

2011-12-20T15:45:45+00:00

On multi-core systems, setting of the key before every caclculation,
causes invalid HMAC calculation for other tfm users, because internal
state (ipad, opad) can be invalid before set key call returns.
It needs to be set only once during initialization.

Signed-off-by: Dmitry Kasatkin 
Acked-by: Mimi Zohar 
Signed-off-by: James Morris

TOMOYO: Fix pathname handling of disconnected paths.

2011-12-08T21:18:12+00:00

Current tomoyo_realpath_from_path() implementation returns strange pathname
when calculating pathname of a file which belongs to lazy unmounted tree.
Use local pathname rather than strange absolute pathname in that case.

Also, this patch fixes a regression by commit 02125a82 "fix apparmor
dereferencing potentially freed dentry, sanitize __d_path() API".

Signed-off-by: Tetsuo Handa 
Acked-by: Al Viro 
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds