linux.git/security/security.c, branch v3.15

vfs: add cross-rename

2014-04-01T15:08:43+00:00

If flags contain RENAME_EXCHANGE then exchange source and destination files.
There's no restriction on the type of the files; e.g. a directory can be
exchanged with a symlink.

Signed-off-by: Miklos Szeredi 
Reviewed-by: Jan Kara 
Reviewed-by: J. Bruce Fields

security: add flags to rename hooks

2014-04-01T15:08:43+00:00

Add flags to security_path_rename() and security_inode_rename() hooks.

Signed-off-by: Miklos Szeredi 
Reviewed-by: J. Bruce Fields

selinux: add gfp argument to security_xfrm_policy_alloc and fix callers

2014-03-10T07:30:02+00:00

security_xfrm_policy_alloc can be called in atomic context so the
allocation should be done with GFP_ATOMIC. Add an argument to let the
callers choose the appropriate way. In order to do so a gfp argument
needs to be added to the method xfrm_policy_alloc_security in struct
security_operations and to the internal function
selinux_xfrm_alloc_user. After that switch to GFP_ATOMIC in the atomic
callers and leave GFP_KERNEL as before for the rest.
The path that needed the gfp argument addition is:
security_xfrm_policy_alloc -> security_ops.xfrm_policy_alloc_security ->
all users of xfrm_policy_alloc_security (e.g. selinux_xfrm_policy_alloc) ->
selinux_xfrm_alloc_user (here the allocation used to be GFP_KERNEL only)

Now adding a gfp argument to selinux_xfrm_alloc_user requires us to also
add it to security_context_to_sid which is used inside and prior to this
patch did only GFP_KERNEL allocation. So add gfp argument to
security_context_to_sid and adjust all of its callers as well.

CC: Paul Moore 
CC: Dave Jones 
CC: Steffen Klassert 
CC: Fan Du 
CC: David S. Miller 
CC: LSM list 
CC: SELinux list 

Signed-off-by: Nikolay Aleksandrov 
Acked-by: Paul Moore 
Signed-off-by: Steffen Klassert

Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into ra-next

2013-10-22T11:26:41+00:00

Merge git://git.infradead.org/users/eparis/selinux

2013-09-18T17:52:20+00:00

Conflicts:
	security/selinux/hooks.c

Pull Eric's existing SELinux tree as there are a number of patches in
there that are not yet upstream.  There was some minor fixup needed to
resolve a conflict in security/selinux/hooks.c:selinux_set_mnt_opts()
between the labeled NFS patches and Eric's security_fs_use()
simplification patch.

lsm: split the xfrm_state_alloc_security() hook implementation

2013-07-25T17:01:25+00:00

The xfrm_state_alloc_security() LSM hook implementation is really a
multiplexed hook with two different behaviors depending on the
arguments passed to it by the caller.  This patch splits the LSM hook
implementation into two new hook implementations, which match the
LSM hooks in the rest of the kernel:

 * xfrm_state_alloc
 * xfrm_state_alloc_acquire

Also included in this patch are the necessary changes to the SELinux
code; no other LSMs are affected.

Signed-off-by: Paul Moore 
Signed-off-by: Eric Paris

xattr: Constify ->name member of "struct xattr".

2013-07-25T09:30:03+00:00

Since everybody sets kstrdup()ed constant string to "struct xattr"->name but
nobody modifies "struct xattr"->name , we can omit kstrdup() and its failure
checking by constifying ->name member of "struct xattr".

Signed-off-by: Tetsuo Handa 
Reviewed-by: Joel Becker  [ocfs2]
Acked-by: Serge E. Hallyn 
Acked-by: Casey Schaufler 
Acked-by: Mimi Zohar 
Reviewed-by: Paul Moore 
Tested-by: Paul Moore 
Acked-by: Eric Paris 
Signed-off-by: James Morris

NFS: Extend NFS xattr handlers to accept the security namespace

2013-06-08T20:20:17+00:00

The existing NFSv4 xattr handlers do not accept xattr calls to the security
namespace. This patch extends these handlers to accept xattrs from the security
namespace in addition to the default NFSv4 ACL namespace.

Acked-by: James Morris 
Signed-off-by: Matthew N. Dodd 
Signed-off-by: Miguel Rodel Felipe 
Signed-off-by: Phua Eu Gene 
Signed-off-by: Khin Mi Mi Aung 
Signed-off-by: Trond Myklebust

LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data.

2013-06-08T20:20:12+00:00

There is no way to differentiate if a text mount option is passed from user
space or the kernel. A flags field is being added to the
security_sb_set_mnt_opts hook to allow for in kernel security flags to be sent
to the LSM for processing in addition to the text options received from mount.
This patch also updated existing code to fix compilation errors.

Acked-by: Eric Paris 
Acked-by: James Morris 
Signed-off-by: David P. Quigley 
Signed-off-by: Miguel Rodel Felipe 
Signed-off-by: Phua Eu Gene 
Signed-off-by: Khin Mi Mi Aung 
Signed-off-by: Trond Myklebust

Security: Add Hook to test if the particular xattr is part of a MAC model.

2013-06-08T20:20:11+00:00

The interface to request security labels from user space is the xattr
interface. When requesting the security label from an NFS server it is
important to make sure the requested xattr actually is a MAC label. This allows
us to make sure that we get the desired semantics from the attribute instead of
something else such as capabilities or a time based LSM.

Acked-by: Eric Paris 
Acked-by: James Morris 
Signed-off-by: Matthew N. Dodd 
Signed-off-by: Miguel Rodel Felipe 
Signed-off-by: Phua Eu Gene 
Signed-off-by: Khin Mi Mi Aung 
Signed-off-by: Trond Myklebust