Files
twx-linux/include/linux
Ondrej Mosnacek 132670ae9f lsm: fix default return value for inode_getsecctx
commit b36995b860 upstream.

-EOPNOTSUPP is the return value that implements a "no-op" hook, not 0.

Without this fix having only the BPF LSM enabled (with no programs
attached) can cause uninitialized variable reads in
nfsd4_encode_fattr(), because the BPF hook returns 0 without touching
the 'ctxlen' variable and the corresponding 'contextlen' variable in
nfsd4_encode_fattr() remains uninitialized, yet being treated as valid
based on the 0 return value.

Cc: stable@vger.kernel.org
Fixes: 98e828a065 ("security: Refactor declaration of LSM hooks")
Reported-by: Benjamin Coddington <bcodding@redhat.com>
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-11-28 16:56:33 +00:00
..
2023-07-23 13:46:54 +02:00
2023-11-08 17:26:42 +01:00
2023-08-11 15:13:51 +02:00
2022-08-17 14:23:11 +02:00
2022-10-26 12:35:12 +02:00
2022-08-31 17:16:34 +02:00
2023-10-10 21:59:06 +02:00
2023-03-30 12:47:50 +02:00
2023-08-30 16:18:19 +02:00
2022-10-26 12:35:26 +02:00
2022-08-17 14:24:08 +02:00
2022-07-12 16:35:08 +02:00
2023-08-03 10:22:30 +02:00
2023-11-20 11:08:16 +01:00
2023-06-21 15:59:15 +02:00
2023-08-26 14:23:39 +02:00
2022-07-02 16:41:17 +02:00
2023-11-28 16:56:21 +00:00
2023-10-19 23:05:33 +02:00
2023-10-19 23:05:33 +02:00
2022-07-12 16:35:08 +02:00
2022-07-29 17:25:32 +02:00
2022-09-15 11:30:05 +02:00