tmakin/tegra-linux-noble
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
rel-38
tegra-linux-noble/security/selinux
T
History
Thiébaud Weksteen 996a99e802 selinux: ignore unknown extended permissions 
BugLink: https://bugs.launchpad.net/bugs/2106632

commit 900f83cf376bdaf798b6f5dcb2eae0c822e908b6 upstream.

When evaluating extended permissions, ignore unknown permissions instead
of calling BUG(). This commit ensures that future permissions can be
added without interfering with older kernels.

Cc: stable@vger.kernel.org
Fixes: fa1aa143ac ("selinux: extended permissions for ioctls")
Signed-off-by: Thiébaud Weksteen <tweek@google.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
CVE-2024-57931
Signed-off-by: Manuel Diewald <manuel.diewald@canonical.com>
Signed-off-by: Mehmet Basaran <mehmet.basaran@canonical.com>
2025-04-15 19:59:06 +03:00
..
include
ima: Avoid blocking in RCU read-side critical section
2024-08-13 12:13:03 +02:00
ss
selinux: ignore unknown extended permissions
2025-04-15 19:59:06 +03:00
.gitignore
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
avc.c
selinux: add the processing of the failure of avc_add_xperms_decision()
2024-11-09 18:45:10 +03:00
hooks.c
selinux,smack: don't bypass permissions check in inode_setsecctx hook
2024-11-09 18:45:26 +03:00
ibpkey.c
selinux: stop passing selinux_state pointers and their offspring
2023-03-14 15:22:45 -04:00
ima.c
selinux: adjust typos in comments
2023-05-08 16:44:01 -04:00
Kconfig
selinux: improve debug configuration
2023-09-13 13:46:57 -04:00
Makefile
selinux: improve debug configuration
2023-09-13 13:46:57 -04:00
netif.c
selinux: avoid implicit conversions in the netif code
2023-07-18 18:29:48 -04:00
netlabel.c
UBUNTU: SAUCE: apparmor4.0.0 [40/90]: LSM stacking v39: LSM: Allow reservation of netlabel
2024-04-12 10:15:33 +02:00
netlink.c
selinux: mark some global variables __ro_after_init
2021-01-12 10:08:55 -05:00
netnode.c
selinux: stop passing selinux_state pointers and their offspring
2023-03-14 15:22:45 -04:00
netport.c
selinux: stop passing selinux_state pointers and their offspring
2023-03-14 15:22:45 -04:00
nlmsgtab.c
selinux: use unsigned iterator in nlmsgtab code
2023-08-09 19:07:49 -04:00
selinuxfs.c
selinux: improve error checking in sel_write_load()
2025-03-14 14:30:04 +01:00
status.c
selinux: avoid implicit conversions regarding enforcing status
2023-07-18 18:29:50 -04:00
xfrm.c
selinux: de-brand SELinux
2023-07-18 18:42:57 -04:00