Vasily Averin dd79c17744 selinux: sel_avc_get_stat_idx should increase position index ... [ Upstream commit 8d269a8e2a ] If seq_file .next function does not change position index, read after some lseek can generate unexpected output. $ dd if=/sys/fs/selinux/avc/cache_stats # usual output lookups hits misses allocations reclaims frees 817223 810034 7189 7189 6992 7037 1934894 1926896 7998 7998 7632 7683 1322812 1317176 5636 5636 5456 5507 1560571 1551548 9023 9023 9056 9115 0+1 records in 0+1 records out 189 bytes copied, 5,1564e-05 s, 3,7 MB/s $# read after lseek to midle of last line $ dd if=/sys/fs/selinux/avc/cache_stats bs=180 skip=1 dd: /sys/fs/selinux/avc/cache_stats: cannot skip to specified offset 056 9115 <<<< end of last line 1560571 1551548 9023 9023 9056 9115 <<< whole last line once again 0+1 records in 0+1 records out 45 bytes copied, 8,7221e-05 s, 516 kB/s $# read after lseek beyond end of of file $ dd if=/sys/fs/selinux/avc/cache_stats bs=1000 skip=1 dd: /sys/fs/selinux/avc/cache_stats: cannot skip to specified offset 1560571 1551548 9023 9023 9056 9115 <<<< generates whole last line 0+1 records in 0+1 records out 36 bytes copied, 9,0934e-05 s, 396 kB/s https://bugzilla.kernel.org/show_bug.cgi?id=206283 Signed-off-by: Vasily Averin <vvs@virtuozzo.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-10-01 13:12:33 +02:00
..
apparmor	apparmor: don't try to replace stale label in ptraceme check	2020-06-30 15:37:57 -04:00
integrity	evm: Fix possible memory leak in evm_calc_hmac_or_hash()	2020-06-20 10:25:15 +02:00
keys	mm: add kvfree_sensitive() for freeing sensitive data objects	2020-06-20 10:24:59 +02:00
loadpin	security: mark LSM hooks as __ro_after_init	2017-03-06 11:00:15 +11:00
selinux	selinux: sel_avc_get_stat_idx should increase position index	2020-10-01 13:12:33 +02:00
smack	Smack: prevent underflow in smk_set_cipso()	2020-08-21 09:48:11 +02:00
tomoyo	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
yama	Yama: Check for pid death before checking ancestry	2019-01-23 08:09:48 +01:00
commoncap.c	exec: Always set cap_ambient in cap_bprm_set_creds	2020-06-03 08:18:01 +02:00
device_cgroup.c	device_cgroup: fix RCU imbalance in error case	2019-04-27 09:35:40 +02:00
inode.c	securityfs: fix use-after-free on symlink traversal	2019-05-25 18:25:34 +02:00
Kconfig	/dev/mem: Add bounce buffer for copy-out	2018-03-24 11:01:24 +01:00
lsm_audit.c	missing barriers in some of unix_sock ->addr and ->path accesses	2019-03-19 13:13:24 +01:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
min_addr.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
security.c	LSM: Check for NULL cred-security on free	2019-01-23 08:09:50 +01:00