- rsbac-commit - rsbac.org

linux-5.10.y 5.10.181 commit 9afae1736497 __sys_setresuid(), __sys_setresgid(): move RSBAC check before no-op
by Amon Ott 01 Jun '23

01 Jun '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.10.y.git;a=summary RSBAC for Linux 5.10 (Long Term) Current version: 5.10.181 commit 9afae17364972a48660438c8025373e5968649c2 Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jun 1 08:38:39 2023 +0200 __sys_setresuid(), __sys_setresgid(): move RSBAC check before no-op check. The kernel no-op check bypasses the RSBAC check and notification, but in RSBAC, setresuid(getuid(), -1, -1) is security relevant and needs to update state. As a side effect, we now also check before the kernel capability check and might see more RSBAC messages as a result. kernel/sys.c | 138 ++++++++++++++++++++++++++++------------------------------- 1 file changed, 66 insertions(+), 72 deletions(-)

1 0

linux-5.15.y 5.15.114 commit 4361aa035d3a __sys_setresuid(), __sys_setresgid(): move RSBAC check before no-op
by Amon Ott 01 Jun '23

01 Jun '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.114 commit 4361aa035d3aa3c9371b33f96f8b6659e8a0f7fd Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jun 1 08:30:58 2023 +0200 __sys_setresuid(), __sys_setresgid(): move RSBAC check before no-op check. The kernel no-op check bypasses the RSBAC check and notification, but in RSBAC, setresuid(getuid(), -1, -1) is security relevant and needs to update state. As a side effect, we now also check before the kernel capability check and might see more RSBAC messages as a result. kernel/sys.c | 138 ++++++++++++++++++++++++++++------------------------------- 1 file changed, 66 insertions(+), 72 deletions(-)

1 0

linux-6.1.y 6.1.31 commit 2d7dc0e60f2f __sys_setresuid(), __sys_setresgid(): move RSBAC check before no-op
by Amon Ott 01 Jun '23

01 Jun '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.31 commit 2d7dc0e60f2fd77cd2c6663d15e5385545308b6f Author: Amon Ott <ao(a)rsbac.org> Date: Thu Jun 1 07:45:04 2023 +0200 __sys_setresuid(), __sys_setresgid(): move RSBAC check before no-op check. The kernel no-op check bypasses the RSBAC check and notification, but in RSBAC, setresuid(getuid(), -1, -1) is security relevant and needs to update state. As a side effect, we now also check before the kernel capability check and might see more RSBAC messages as a result. kernel/sys.c | 138 ++++++++++++++++++++++++++++------------------------------- 1 file changed, 66 insertions(+), 72 deletions(-)

1 0

linux-4.14.y 4.14.316 commit 3838b94f43ec Add missing put_pid in do_accept().
by Amon Ott 31 May '23

31 May '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-4.14.y.git;a=summary RSBAC for Linux 4.14 (Long Term) Current version: 4.14.316 commit 3838b94f43ec6b0fefe45fa8a637f979427f66b8 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Apr 5 13:08:25 2023 +0200 Add missing put_pid in do_accept(). net/socket.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-)

1 0

linux-4.19.y 4.19.284 commit 73aac03af3a8 Add missing put_pid in do_accept().
by Amon Ott 31 May '23

31 May '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-4.19.y.git;a=summary RSBAC for Linux 4.19 (Long Term) Current version: 4.19.284 commit 73aac03af3a8de0a7969f4e89da9e0fb16b8bad3 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Apr 5 13:08:07 2023 +0200 Add missing put_pid in do_accept(). net/socket.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-)

1 0

linux-5.4.y 5.4.244 commit 93d1afb904bb Add missing put_pid in do_accept().
by Amon Ott 31 May '23

31 May '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.4.y.git;a=summary RSBAC for Linux 5.4 (Long Term) Current version: 5.4.244 commit 93d1afb904bb4a1186fcd577fec569e2092ad954 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Apr 5 13:01:16 2023 +0200 Add missing put_pid in do_accept(). net/socket.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-)

1 0

linux-5.10.y 5.10.181 commit f1f48b252cab Avoid double put_pid() in do_accept().
by Amon Ott 31 May '23

31 May '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.10.y.git;a=summary RSBAC for Linux 5.10 (Long Term) Current version: 5.10.181 commit f1f48b252cab54e55d66b77579e272156b17992c Author: Amon Ott <ao(a)rsbac.org> Date: Wed Apr 5 12:58:16 2023 +0200 Avoid double put_pid() in do_accept(). net/socket.c | 2 -- 1 file changed, 2 deletions(-)

1 0

linux-5.15.y 5.15.114 commit dd93a4e1f410 Avoid double put_pid() in do_accept().
by Amon Ott 31 May '23

31 May '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.114 commit dd93a4e1f4105542e79ad1a552153cc6bc53a5f3 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Apr 5 13:02:53 2023 +0200 Avoid double put_pid() in do_accept(). net/socket.c | 2 -- 1 file changed, 2 deletions(-)

1 0

linux-6.1.y 6.1.31 commit 5cfc85aa8010 Add missing put_pid in do_accept().
by Amon Ott 31 May '23

31 May '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.1.y.git;a=summary RSBAC for Linux 6.1 (Long Term) Current version: 6.1.31 commit 5cfc85aa80105c4fbef129ab2f579795a0206315 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Apr 5 12:52:08 2023 +0200 Add missing put_pid in do_accept(). net/socket.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-)

1 0

linux-5.15.y 5.15.113 commit c04e2dfe6b43 Avoid double put_pid() in do_accept().
by Amon Ott 25 May '23

25 May '23

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary RSBAC for Linux 5.15 (Long Term) Current version: 5.15.113 commit c04e2dfe6b431432466968a346cda0f1b75e30e8 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Apr 5 13:02:53 2023 +0200 Avoid double put_pid() in do_accept(). net/socket.c | 2 -- 1 file changed, 2 deletions(-)

1 0

2025

2024

2023

2022

rsbac-commit