Paul Moore a3727a8bac selinux,smack: fix subjective/objective credential use mixups ... Jann Horn reported a problem with commit eb1231f73c ("selinux: clarify task subjective and objective credentials") where some LSM hooks were attempting to access the subjective credentials of a task other than the current task. Generally speaking, it is not safe to access another task's subjective credentials and doing so can cause a number of problems. Further, while looking into the problem, I realized that Smack was suffering from a similar problem brought about by a similar commit 1fb057dcde ("smack: differentiate between subjective and objective task credentials"). This patch addresses this problem by restoring the use of the task's objective credentials in those cases where the task is other than the current executing task. Not only does this resolve the problem reported by Jann, it is arguably the correct thing to do in these cases. Cc: stable@vger.kernel.org Fixes: eb1231f73c ("selinux: clarify task subjective and objective credentials") Fixes: 1fb057dcde ("smack: differentiate between subjective and objective task credentials") Reported-by: Jann Horn <jannh@google.com> Acked-by: Eric W. Biederman <ebiederm@xmission.com> Acked-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Paul Moore <paul@paul-moore.com>		2021-09-23 12:30:59 -04:00
..
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
Makefile	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
smack_access.c	Smack: Fix wrong semantics in smk_access_entry()	2021-07-20 09:17:36 -07:00
smack_lsm.c	selinux,smack: fix subjective/objective credential use mixups	2021-09-23 12:30:59 -04:00
smack_netfilter.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
smack.h	smack: mark 'smack_enabled' global variable as __initdata	2021-07-20 10:34:59 -07:00
smackfs.c	smackfs: restrict bytes count in smk_set_cipso()	2021-05-10 13:55:08 -07:00