android_kernel_sony_sdm845/security/smack
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Stephen Smalley fa065f0c57 UPSTREAM: proc,security: move restriction on writing /proc/pid/attr nodes to proc
Processes can only alter their own security attributes via
/proc/pid/attr nodes.  This is presently enforced by each individual
security module and is also imposed by the Linux credentials
implementation, which only allows a task to alter its own credentials.
Move the check enforcing this restriction from the individual
security modules to proc_pid_attr_write() before calling the security hook,
and drop the unnecessary task argument to the security hook since it can
only ever be the current task.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
2026-05-15 18:02:34 +07:00
..
Kconfig
Makefile
smack.h
smack_access.c Smack: Fix wrong semantics in smk_access_entry() 2021-09-22 11:43:04 +02:00
smack_lsm.c UPSTREAM: proc,security: move restriction on writing /proc/pid/attr nodes to proc 2026-05-15 18:02:34 +07:00
smack_netfilter.c
smackfs.c UPSTREAM: fs: constify tree_descr arrays passed to simple_fill_super() 2026-05-15 17:55:17 +07:00