March 2023 - rsbac-commit

linux-5.15.y 5.15.105 commit 0dbf6a74e191 Check ext2 and ext4 ioctl with DEV target, not DIR. Check ext4 FITR
by Amon Ott 31 Mar '23

31 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.105 commit 0dbf6a74e191c533c0e90fbb39c99761570d2fa1 Author: Amon Ott <ao(a)rsbac.org> Date: Fri Mar 31 09:33:45 2023 +0200 Check ext2 and ext4 ioctl with DEV target, not DIR. Check ext4 FITRIM as R_GET_PERMISSIONS_DATA, not R_MODIFY_PERMISSIONS_DATA. Check R_GET_PERMISSIONS_DATA and R_MODIFY_PERMISSIONS_DATA on DEV block in JAIL and MAC. fs/ext2/ioctl.c | 15 ++++----------- fs/ext4/ioctl.c | 17 +++++------------ rsbac/adf/jail/jail_main.c | 22 ++++++++++++++++++++-- rsbac/adf/mac/mac_main.c | 11 +++++++++-- 4 files changed, 38 insertions(+), 27 deletions(-)

1 0

linux-6.1.y 6.1.22 commit c7d8b7b8a683 Check ext2 and ext4 ioctl with DEV block target, not DIR. Check ext
by Amon Ott 31 Mar '23

31 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.22 commit c7d8b7b8a683deded3a5247bf4c8c4079637fe1e Author: Amon Ott <ao(a)rsbac.org> Date: Fri Mar 31 08:26:03 2023 +0200 Check ext2 and ext4 ioctl with DEV block target, not DIR. Check ext4 FITRIM as R_GET_PERMISSIONS_DATA, not R_MODIFY_PERMISSIONS_DATA. Check R_GET_PERMISSIONS_DATA and R_MODIFY_PERMISSIONS_DATA on DEV block in JAIL and MAC. fs/ext2/ioctl.c | 15 ++++----------- fs/ext4/ioctl.c | 17 +++++------------ rsbac/adf/jail/jail_main.c | 22 ++++++++++++++++++++-- rsbac/adf/mac/mac_main.c | 11 +++++++++-- 4 files changed, 38 insertions(+), 27 deletions(-)

1 0

linux-5.15.y 5.15.105 commit aae7385d2d8a Review: fix R_NET_SHUTDOWN in __sys_shutdown() and minor glitches.
by Amon Ott 31 Mar '23

31 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.105 commit aae7385d2d8af06cc07a26caae44a97488b7ab9e Author: Amon Ott <ao(a)rsbac.org> Date: Wed Mar 8 14:49:28 2023 +0100 Review: fix R_NET_SHUTDOWN in __sys_shutdown() and minor glitches. fs/namespace.c | 4 ++++ net/socket.c | 69 +++++++++++++++++++++++++++++----------------------------- 2 files changed, 38 insertions(+), 35 deletions(-)

1 0

linux-6.1.y 6.1.22 commit f50c7c7de1c2 Review: fix R_NET_SHUTDOWN in __sys_shutdown() and several minor gl
by Amon Ott 31 Mar '23

31 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.22 commit f50c7c7de1c2aaa619c29be5922778c1e8839f8d Author: Amon Ott <ao(a)rsbac.org> Date: Wed Mar 8 14:47:18 2023 +0100 Review: fix R_NET_SHUTDOWN in __sys_shutdown() and several minor glitches. drivers/block/loop.c | 4 +-- drivers/char/mem.c | 7 +++--- fs/namespace.c | 4 +++ fs/proc/base.c | 3 +-- kernel/bpf/syscall.c | 1 + kernel/ptrace.c | 1 + mm/mprotect.c | 8 +++--- net/sched/sch_api.c | 4 +-- net/socket.c | 69 ++++++++++++++++++++++++++-------------------------- net/unix/af_unix.c | 2 +- 10 files changed, 54 insertions(+), 49 deletions(-)

1 0

linux-4.14.y 4.14.311 commit abf7e6cfe0d3 Do not check space in rsbac_symlink_redirect(), rather truncate res
by Amon Ott 23 Mar '23

23 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-4.14.y.git;a=summary RSBAC for Linux 4.14 (Long Term) Current version: 4.14.311 commit abf7e6cfe0d34130235f5e1bc1a7b1776946cd28 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Nov 3 13:26:56 2021 +0100 Do not check space in rsbac_symlink_redirect(), rather truncate result later. This follows the standard readlink() behaviour, which silently truncates, if there is not enough space. fs/namei.c | 6 ++++-- fs/stat.c | 2 +- include/rsbac/adf.h | 1 - rsbac/adf/adf_main.c | 51 +++++++-------------------------------------------- 4 files changed, 12 insertions(+), 48 deletions(-)

1 0

linux-4.19.y 4.19.279 commit e3bd33ca25a7 Do not check space in rsbac_symlink_redirect(), rather truncate res
by Amon Ott 23 Mar '23

23 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-4.19.y.git;a=summary RSBAC for Linux 4.19 (Long Term) Current version: 4.19.279 commit e3bd33ca25a7c8b0cecc184ff4ab39f5432c9137 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Nov 3 13:21:45 2021 +0100 Do not check space in rsbac_symlink_redirect(), rather truncate result later. This follows the standard readlink() behaviour, which silently truncates, if there is not enough space. fs/namei.c | 6 ++++-- fs/stat.c | 2 +- include/rsbac/adf.h | 1 - rsbac/adf/adf_main.c | 51 +++++++-------------------------------------------- 4 files changed, 12 insertions(+), 48 deletions(-)

1 0

linux-5.4.y 5.4.238 commit 14b5b2a22a19 sysfs_kf_seq_show(), sysfs_kf_bin_read(): fix attribute type in req
by Amon Ott 23 Mar '23

23 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.4.y.git;a=summary RSBAC for Linux 5.4 (Long Term) Current version: 5.4.238 commit 14b5b2a22a195bfab7934481102e76699c01a3b5 Author: Amon Ott <ao(a)rsbac.org> Date: Mon May 16 14:59:17 2022 +0200 sysfs_kf_seq_show(), sysfs_kf_bin_read(): fix attribute type in request. fs/sysfs/file.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

linux-5.10.y 5.10.176 commit 84c2f39e8b63 Review: fix R_NET_SHUTDOWN in __sys_shutdown() and minor glitches.
by Amon Ott 23 Mar '23

23 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.10.y.git;a=summary RSBAC for Linux 5.10 (Long Term) Current version: 5.10.176 commit 84c2f39e8b63e6709c30405bfda134c7399466f6 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Mar 8 14:50:10 2023 +0100 Review: fix R_NET_SHUTDOWN in __sys_shutdown() and minor glitches. fs/namespace.c | 4 ++++ net/socket.c | 69 +++++++++++++++++++++++++++++----------------------------- 2 files changed, 38 insertions(+), 35 deletions(-)

1 0

linux-5.15.y 5.15.104 commit 13cfc75e80a9 Review: fix R_NET_SHUTDOWN in __sys_shutdown() and minor glitches.
by Amon Ott 23 Mar '23

23 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.104 commit 13cfc75e80a9c012b6e8ee34387718bdbdebc5a5 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Mar 8 14:49:28 2023 +0100 Review: fix R_NET_SHUTDOWN in __sys_shutdown() and minor glitches. fs/namespace.c | 4 ++++ net/socket.c | 69 +++++++++++++++++++++++++++++----------------------------- 2 files changed, 38 insertions(+), 35 deletions(-)

1 0

linux-6.1.y 6.1.21 commit e78d122b37ad Review: fix R_NET_SHUTDOWN in __sys_shutdown() and several minor gl
by Amon Ott 23 Mar '23

23 Mar '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.21 commit e78d122b37ad1b176e75fe5d46c46c3570815aae Author: Amon Ott <ao(a)rsbac.org> Date: Wed Mar 8 14:47:18 2023 +0100 Review: fix R_NET_SHUTDOWN in __sys_shutdown() and several minor glitches. drivers/block/loop.c | 4 +-- drivers/char/mem.c | 7 +++--- fs/namespace.c | 4 +++ fs/proc/base.c | 3 +-- kernel/bpf/syscall.c | 1 + kernel/ptrace.c | 1 + mm/mprotect.c | 8 +++--- net/sched/sch_api.c | 4 +-- net/socket.c | 69 ++++++++++++++++++++++++++-------------------------- net/unix/af_unix.c | 2 +- 10 files changed, 54 insertions(+), 49 deletions(-)

1 0

2025

2024

2023

2022

rsbac-commit March 2023