ima: fix ima_d_path() possible race with rename

Browse source

On failure to return a pathname from ima_d_path(), a pointer to
dname is returned, which is subsequently used in the IMA measurement
list, the IMA audit records, and other audit logging.  Saving the
pointer to dname for later use has the potential to race with rename.

Intead of returning a pointer to dname on failure, this patch returns
a pointer to a copy of the filename.

Reported-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: stable@vger.kernel.org

...

This commit is contained in:

Mimi Zohar 2017-01-17 06:45:41 -05:00

parent 710584b9da

commit bc15ed663e

3 changed files with 24 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

security/integrity/ima/ima.h

View file

20

security/integrity/ima/ima_api.c

View file

8

security/integrity/ima/ima_main.c

View file