mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-23 09:19:51 +00:00
![]() The security_task_getsecid_subj() LSM hook invites misuse by allowing callers to specify a task even though the hook is only safe when the current task is referenced. Fix this by removing the task_struct argument to the hook, requiring LSM implementations to use the current task. While we are changing the hook declaration we also rename the function to security_current_getsecid_subj() in an effort to reinforce that the hook captures the subjective credentials of the current task and not an arbitrary task on the system. Reviewed-by: Serge Hallyn <serge@hallyn.com> Reviewed-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Paul Moore <paul@paul-moore.com> |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
netlabel_addrlist.c | ||
netlabel_addrlist.h | ||
netlabel_calipso.c | ||
netlabel_calipso.h | ||
netlabel_cipso_v4.c | ||
netlabel_cipso_v4.h | ||
netlabel_domainhash.c | ||
netlabel_domainhash.h | ||
netlabel_kapi.c | ||
netlabel_mgmt.c | ||
netlabel_mgmt.h | ||
netlabel_unlabeled.c | ||
netlabel_unlabeled.h | ||
netlabel_user.c | ||
netlabel_user.h |