projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2835a13) | patch
apparmor: revalidate files during exec
authorJohn Johansen <john.johansen@canonical.com>
Fri, 9 Jun 2017 18:58:42 +0000 (11:58 -0700)
committerJohn Johansen <john.johansen@canonical.com>
Sun, 11 Jun 2017 00:11:37 +0000 (17:11 -0700)
commit192ca6b55a866e838aee98d9cb6a0b5086467c03
treeeba93d671a1476432f357fa68e6842f548e2cb2ftree | snapshot
parent2835a13bbdc09d330eafdf5e67eb407c90c01ab7commit | diff
apparmor: revalidate files during exec

Instead of running file revalidation lazily when read/write are called
copy selinux and revalidate the file table on exec. This avoids
extra mediation overhead in read/write and also prevents file handles
being passed through to a grand child unchecked.

Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/file.c diff | blob | history
security/apparmor/include/audit.h diff | blob | history
security/apparmor/include/file.h diff | blob | history
security/apparmor/lsm.c diff | blob | history
Domain: System / Kernel;