kernel/linux.git/security/apparmor/file.c, branch v4.14.263

Revert "apparmor: add base infastructure for socket mediation"

2017-10-26T17:35:35+00:00

This reverts commit 651e28c5537abb39076d3949fb7618536f1d242e. This caused a regression: "The specific problem is that dnsmasq refuses to start on openSUSE Leap 42.2. The specific cause is that and attempt to open a PF_LOCAL socket gets EACCES. This means that networking doesn't function on a system with a 4.14-rc2 system." Sadly, the developers involved seemed to be in denial for several weeks about this, delaying the revert. This has not been a good release for the security subsystem, and this area needs to change development practices. Reported-and-bisected-by: James Bottomley Tracked-by: Thorsten Leemhuis Cc: John Johansen Cc: Vlastimil Babka Cc: Seth Arnold Signed-off-by: Linus Torvalds

apparmor: add base infastructure for socket mediation

2017-09-22T20:00:58+00:00

apparmor: put back designators in struct initialisers

2017-06-28T05:50:43+00:00

Fixes: 8014370f1257 ("apparmor: move path_link mediation to using labels") Signed-off-by: Stephen Rothwell Acked-by: John Johansen Acked-by: Kees Cook Signed-off-by: James Morris

apparmor: rework file permission to cache file access in file->ctx

2017-06-11T00:11:44+00:00

This is a temporary step, towards using the file->ctx for delegation, and also helps speed up file queries, until the permission lookup cache is introduced. Signed-off-by: John Johansen

apparmor: move path_link mediation to using labels

2017-06-11T00:11:44+00:00

Signed-off-by: John Johansen

apparmor: refactor path name lookup and permission checks around labels

2017-06-11T00:11:43+00:00

Signed-off-by: John Johansen

apparmor: update aa_audit_file() to use labels

2017-06-11T00:11:43+00:00

Signed-off-by: John Johansen

apparmor: move aa_file_perm() to use labels

2017-06-11T00:11:42+00:00

Signed-off-by: John Johansen

apparmor: switch from profiles to using labels on contexts

2017-06-11T00:11:38+00:00

Begin the actual switch to using domain labels by storing them on the context and converting the label to a singular profile where possible. Signed-off-by: John Johansen

apparmor: revalidate files during exec

2017-06-11T00:11:37+00:00

Instead of running file revalidation lazily when read/write are called copy selinux and revalidate the file table on exec. This avoids extra mediation overhead in read/write and also prevents file handles being passed through to a grand child unchecked. Signed-off-by: John Johansen