From: Rafal Krypa Date: Tue, 13 Dec 2016 01:44:53 +0000 (+0900) Subject: Smack: fix d_instantiate logic for sockfs and pipefs X-Git-Tag: submit/tizen/20161219.112149~4 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=ef86ba27a5f3443c27e200199fa1bbbb9c4d6c10;p=sdk%2Femulator%2Femulator-kernel.git Smack: fix d_instantiate logic for sockfs and pipefs Since 4b936885a (v2.6.32) all inodes on sockfs and pipefs are disconnected. It caused filesystem specific code in smack_d_instantiate to be skipped, because all inodes on those pseudo filesystems were treated as root inodes. As a result all sockfs inodes had the Smack label set to floor. In most cases access checks for sockets use socket_smack data so the inode label is not important. But there are special cases that were broken. One example would be calling fcntl with F_SETOWN command on a socket fd. Now smack_d_instantiate expects all pipefs and sockfs inodes to be disconnected and has the logic in appropriate place. Change-Id: Id83469a5b29958ec7c2cdbafbbaa014276126351 Signed-off-by: Rafal Krypa Signed-off-by: jooseong lee --- diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c index 44731d3d5f65..1f481d4b13ba 100644 --- a/security/smack/smack_lsm.c +++ b/security/smack/smack_lsm.c @@ -3422,6 +3422,13 @@ static void smack_d_instantiate(struct dentry *opt_dentry, struct inode *inode) case PIPEFS_MAGIC: isp->smk_inode = smk_of_current(); break; + case SOCKFS_MAGIC: + /* + * Socket access is controlled by the socket + * structures associated with the task involved. + */ + isp->smk_inode = &smack_known_star; + break; default: isp->smk_inode = sbsp->smk_root; break; @@ -3438,19 +3445,12 @@ static void smack_d_instantiate(struct dentry *opt_dentry, struct inode *inode) */ switch (sbp->s_magic) { case SMACK_MAGIC: - case PIPEFS_MAGIC: - case SOCKFS_MAGIC: case CGROUP_SUPER_MAGIC: /* * Casey says that it's a little embarrassing * that the smack file system doesn't do * extended attributes. * - * Casey says pipes are easy (?) - * - * Socket access is controlled by the socket - * structures associated with the task involved. - * * Cgroupfs is special */ final = &smack_known_star;