Kees Cook 72bd26a791 proc: Check /proc/$pid/attr/ writes against file opener ...

commit bfb819ea20 upstream.

Fix another "confused deputy" weakness[1]. Writes to /proc/$pid/attr/
files need to check the opener credentials, since these fds do not
transition state across execve(). Without this, it is possible to
trick another process (which may have different credentials) to write
to its own /proc/$pid/attr/ files, leading to unexpected and possibly
exploitable behaviors.

[1] https://www.kernel.org/doc/html/latest/security/credentials.html?highlight=confused#open-file-credentials

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-06-03 08:36:12 +02:00

..

array.c

…

base.c

proc: Check /proc/$pid/attr/ writes against file opener

2021-06-03 08:36:12 +02:00

cmdline.c

…

consoles.c

…

cpuinfo.c

…

devices.c

…

fd.c

…

fd.h

…

generic.c

…

inode.c

…

internal.h

…

interrupts.c

…

Kconfig

…

kcore.c

…

kmsg.c

…

loadavg.c

…

Makefile

…

meminfo.c

…

namespaces.c

…

nommu.c

…

page.c

…

proc_net.c

…

proc_sysctl.c

…

proc_tty.c

…

root.c

…

self.c

proc: don't allow async path resolution of /proc/self components

2020-12-02 08:34:41 +01:00

softirqs.c

…

stat.c

…

task_mmu.c

…

task_nommu.c

…

thread_self.c

…

uptime.c

…

version.c

…

vmcore.c

…