diff options
| author | Masami Hiramatsu (Google) <mhiramat@kernel.org> | 2025-09-19 10:15:56 +0900 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-10-02 13:42:53 +0200 |
| commit | 3887f3814c0e770e6b73567fe0f83a2c01a6470c (patch) | |
| tree | 4f163a1808ec64130ab5c3e65afd1697a051784d | |
| parent | 8703940bd30b5ad94408d28d7192db2491cd3592 (diff) | |
| download | linux-3887f3814c0e770e6b73567fe0f83a2c01a6470c.tar.gz linux-3887f3814c0e770e6b73567fe0f83a2c01a6470c.tar.bz2 linux-3887f3814c0e770e6b73567fe0f83a2c01a6470c.zip | |
tracing: dynevent: Add a missing lockdown check on dynevent
commit 456c32e3c4316654f95f9d49c12cbecfb77d5660 upstream.
Since dynamic_events interface on tracefs is compatible with
kprobe_events and uprobe_events, it should also check the lockdown
status and reject if it is set.
Link: https://lore.kernel.org/all/175824455687.45175.3734166065458520748.stgit@devnote2/
Fixes: 17911ff38aa5 ("tracing: Add locked_down checks to the open calls of files created for tracefs")
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| -rw-r--r-- | kernel/trace/trace_dynevent.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/kernel/trace/trace_dynevent.c b/kernel/trace/trace_dynevent.c index c9b0533407ed..76737492e750 100644 --- a/kernel/trace/trace_dynevent.c +++ b/kernel/trace/trace_dynevent.c @@ -239,6 +239,10 @@ static int dyn_event_open(struct inode *inode, struct file *file) { int ret; + ret = security_locked_down(LOCKDOWN_TRACEFS); + if (ret) + return ret; + ret = tracing_check_open_get_tr(NULL); if (ret) return ret; |