twx-linux/security
Thiébaud Weksteen c1dbd28a07 selinux: ignore unknown extended permissions
commit 900f83cf376bdaf798b6f5dcb2eae0c822e908b6 upstream.

When evaluating extended permissions, ignore unknown permissions instead
of calling BUG(). This commit ensures that future permissions can be
added without interfering with older kernels.

Cc: stable@vger.kernel.org
Fixes: fa1aa143ac4a ("selinux: extended permissions for ioctls")
Signed-off-by: Thiébaud Weksteen <tweek@google.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-01-09 13:31:54 +01:00
..
apparmor apparmor: test: Fix memory leak for aa_unpack_strdup() 2024-12-09 10:32:45 +01:00
bpf
integrity ima: fix buffer overrun in ima_eventdigest_init_common 2024-11-22 15:38:34 +01:00
keys security/keys: fix slab-out-of-bounds in key_task_permission 2024-11-14 13:19:30 +01:00
landlock
loadpin
lockdown
safesetid
selinux selinux: ignore unknown extended permissions 2025-01-09 13:31:54 +01:00
smack
tomoyo tomoyo: fallback to realpath if symlink's pathname does not exist 2024-10-10 11:57:57 +02:00
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig proc: add config & param to block forcing mem writes 2024-10-10 11:57:27 +02:00
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c