Adrian Bunk e6169b5398 security/seclvl.c: fix time wrap (CVE-2005-4352) ...

initlvl=2 in seclvl gives the guarantee
"Cannot decrement the system time".

But it was possible to set the time to the maximum unixtime value
(19 Jan 2038) resulting in a wrap to the minimum value.

This patch fixes this by disallowing setting the time to any date
after 2030 with initlvl=2.

Signed-off-by: Adrian Bunk <bunk@stusta.de>

2006-11-17 17:42:43 +01:00

..

keys

[PATCH] Keys: Fix oops when adding key to non-keyring [CVE-2006-1522]

2006-04-10 21:48:21 -07:00

selinux

[PATCH] selinux: check for failed kmalloc in security_sid_to_context()

2006-05-20 15:00:31 -07:00

capability.c

kbuild: un-stringnify KBUILD_MODNAME

2006-01-06 21:17:50 +01:00

commoncap.c

[PATCH] move capable() to capability.h

2006-01-11 18:42:13 -08:00

dummy.c

[PATCH] move capable() to capability.h

2006-01-11 18:42:13 -08:00

inode.c

[PATCH] mutex subsystem, semaphore to mutex: VFS, ->i_sem

2006-01-09 15:59:24 -08:00

Kconfig

[LSM-IPSec]: Security association restriction.

2006-01-03 13:10:24 -08:00

Makefile

[PATCH] add securityfs for all LSMs to use

2005-07-08 18:48:41 -07:00

root_plug.c

…

seclvl.c

security/seclvl.c: fix time wrap (CVE-2005-4352)

2006-11-17 17:42:43 +01:00

security.c

[PATCH] move capable() to capability.h

2006-01-11 18:42:13 -08:00