Kees Cook bfb819ea20 proc: Check /proc/$pid/attr/ writes against file opener ... Fix another "confused deputy" weakness[1]. Writes to /proc/$pid/attr/ files need to check the opener credentials, since these fds do not transition state across execve(). Without this, it is possible to trick another process (which may have different credentials) to write to its own /proc/$pid/attr/ files, leading to unexpected and possibly exploitable behaviors. [1] https://www.kernel.org/doc/html/latest/security/credentials.html?highlight=confused#open-file-credentials Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Cc: stable@vger.kernel.org Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2021-05-25 10:24:41 -10:00
..
9p	9p for 5.13-rc1	2021-05-07 11:18:52 -07:00
adfs	…
affs	…
afs	afs: Fix fall-through warnings for Clang	2021-05-25 07:30:34 -10:00
autofs	…
befs	…
bfs	…
btrfs	for-5.13-rc2-tag	2021-05-21 13:24:12 -10:00
cachefiles	…
ceph	Notable items here are a series to take advantage of David Howells'	2021-05-06 10:27:02 -07:00
cifs	Fix KASAN identified use-after-free issue.	2021-05-20 12:20:42 -05:00
coda	…
configfs	treewide: remove editor modelines and cruft	2021-05-07 00:26:34 -07:00
cramfs	…
crypto	…
debugfs	…
devpts	…
dlm	…
ecryptfs	fs: ecryptfs: remove BUG_ON from crypt_scatterlist	2021-05-13 18:32:26 +02:00
efivarfs	…
efs	…
erofs	erofs: fix 1 lcluster-sized pcluster for big pcluster	2021-05-13 15:58:46 +08:00
exfat	…
exportfs	…
ext2	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2021-05-02 09:14:01 -07:00
ext4	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2021-05-02 09:14:01 -07:00
f2fs	f2fs: return EINVAL for hole cases in swap file	2021-05-12 07:38:00 -07:00
fat	fs: fat: fix spelling typo of values	2021-05-07 00:26:34 -07:00
freevxfs	…
fscache	…
fuse	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2021-05-02 09:14:01 -07:00
gfs2	mm: introduce and use mapping_empty()	2021-05-05 11:27:19 -07:00
hfs	…
hfsplus	hfsplus: prevent corruption in shrinking truncate	2021-05-14 19:41:32 -07:00
hostfs	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2021-05-02 09:14:01 -07:00
hpfs	hpfs: replace one-element array with flexible-array member	2021-05-06 19:24:13 -07:00
hugetlbfs	userfaultfd: hugetlbfs: fix new flag usage in error path	2021-05-22 15:09:07 -10:00
iomap	mm/filemap: fix readahead return types	2021-05-14 19:41:32 -07:00
isofs	isofs: fix fall-through warnings for Clang	2021-05-06 19:24:13 -07:00
jbd2	…
jffs2	This pull request contains changes for JFFS2, UBI and UBIFS	2021-05-04 18:08:40 -07:00
jfs	…
kernfs	…
lockd	…
minix	…
netfs	netfs: Make CONFIG_NETFS_SUPPORT auto-selected rather than manual	2021-05-25 13:48:04 +01:00
nfs	NFS client updates for Linux 5.13	2021-05-07 11:23:41 -07:00
nfs_common	…
nfsd	NFS client updates for Linux 5.13	2021-05-07 11:23:41 -07:00
nilfs2	Merge branch 'akpm' (patches from Andrew)	2021-05-07 00:34:51 -07:00
nls	…
notify	…
ntfs	…
ocfs2	treewide: remove editor modelines and cruft	2021-05-07 00:26:34 -07:00
omfs	…
openpromfs	…
orangefs	…
overlayfs	overlayfs update for 5.13	2021-04-30 15:17:08 -07:00
proc	proc: Check /proc/$pid/attr/ writes against file opener	2021-05-25 10:24:41 -10:00
pstore	…
qnx4	…
qnx6	…
quota	quota: Use 'hlist_for_each_entry' to simplify code	2021-05-10 16:27:49 +02:00
ramfs	…
reiserfs	treewide: remove editor modelines and cruft	2021-05-07 00:26:34 -07:00
romfs	…
squashfs	squashfs: fix divide error in calculate_skip()	2021-05-14 19:41:32 -07:00
sysfs	…
sysv	…
tracefs	…
ubifs	This pull request contains changes for JFFS2, UBI and UBIFS	2021-05-04 18:08:40 -07:00
udf	…
ufs	…
unicode	.gitignore: prefix local generated files with a slash	2021-05-02 00:43:35 +09:00
vboxsf	…
verity	…
xfs	xfs: restore old ioctl definitions	2021-05-20 08:31:22 -07:00
zonefs	…
Kconfig	NFS client updates for Linux 5.13	2021-05-07 11:23:41 -07:00
Kconfig.binfmt	…
Makefile	…
aio.c	Revert "mremap: don't allow MREMAP_DONTUNMAP on special_mappings and aio"	2021-04-30 11:20:39 -07:00
anon_inodes.c	…
attr.c	…
bad_inode.c	…
binfmt_aout.c	…
binfmt_elf.c	…
binfmt_elf_fdpic.c	…
binfmt_em86.c	…
binfmt_flat.c	…
binfmt_misc.c	…
binfmt_script.c	…
block_dev.c	block-5.13-2021-05-22	2021-05-22 07:40:34 -10:00
buffer.c	Merge branch 'akpm' (patches from Andrew)	2021-05-05 13:50:15 -07:00
char_dev.c	…
compat_binfmt_elf.c	…
coredump.c	…
d_path.c	…
dax.c	dax fixes for 5.13-rc2	2021-05-15 08:28:08 -07:00
dcache.c	…
direct-io.c	…
drop_caches.c	…
eventfd.c	…
eventpoll.c	fs/epoll: restore waking from ep_done_scan()	2021-05-06 19:24:13 -07:00
exec.c	…
fcntl.c	…
fhandle.c	…
file.c	Merge branch 'work.file' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2021-05-03 11:05:28 -07:00
file_table.c	…
filesystems.c	…
fs-writeback.c	…
fs_context.c	…
fs_parser.c	vfs: fs_parser: clean up kernel-doc warnings	2021-04-30 11:20:35 -07:00
fs_pin.c	…
fs_struct.c	…
fs_types.c	…
fsopen.c	…
init.c	…
inode.c	mm: remove nrexceptional from inode: remove BUG_ON	2021-05-05 11:27:20 -07:00
internal.h	…
io-wq.c	…
io-wq.h	…
io_uring.c	io_uring: fortify tctx/io_wq cleanup	2021-05-20 07:29:11 -06:00
ioctl.c	…
kernel_read_file.c	…
libfs.c	…
locks.c	Additional fixes and clean-ups for NFSD since tags/nfsd-5.13,	2021-05-05 13:44:19 -07:00
mbcache.c	…
mount.h	…
mpage.c	…
namei.c	…
namespace.c	fs/mount_setattr: tighten permission checks	2021-05-12 14:13:16 +02:00
no-block.c	…
nsfs.c	…
open.c	…
pipe.c	…
pnode.c	…
pnode.h	…
posix_acl.c	…
proc_namespace.c	…
read_write.c	…
readdir.c	…
remap_range.c	…
select.c	…
seq_file.c	…
signalfd.c	signalfd: Remove SIL_PERF_EVENT fields from signalfd_siginfo	2021-05-18 16:20:54 -05:00
splice.c	…
stack.c	…
stat.c	…
statfs.c	…
super.c	…
sync.c	…
timerfd.c	…
userfaultfd.c	userfaultfd: add UFFDIO_CONTINUE ioctl	2021-05-05 11:27:22 -07:00
utimes.c	…
xattr.c	…