android_kernel_xiaomi_sm8350/security/selinux
Oleg Nesterov ecd6de3c88 selinux: selinux_bprm_committed_creds() should wake up ->real_parent, not ->parent.
We shouldn't worry about the tracer if current is ptraced, exec() must not
succeed if the tracer has no rights to trace this task after cred changing.
But we should notify ->real_parent which is, well, real parent.

Also, we don't need _irq to take tasklist, and we don't need parent's
->siglock to wake_up_interruptible(real_parent->signal->wait_chldexit).
Since we hold tasklist, real_parent->signal must be stable. Otherwise
spin_lock(siglock) is not safe too and can't help anyway.

Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
2009-04-30 09:08:48 +10:00
..
include Permissive domain in userspace object manager 2009-04-02 09:23:45 +11:00
ss Permissive domain in userspace object manager 2009-04-02 09:23:45 +11:00
avc.c Permissive domain in userspace object manager 2009-04-02 09:23:45 +11:00
exports.c CRED: Wrap current->cred and a few other accessors 2008-11-14 10:39:18 +11:00
hooks.c selinux: selinux_bprm_committed_creds() should wake up ->real_parent, not ->parent. 2009-04-30 09:08:48 +10:00
Kconfig selinux: Deprecate and schedule the removal of the the compat_net functionality 2008-12-31 12:54:11 -05:00
Makefile
netif.c
netlabel.c netlabel: Label incoming TCP connections correctly in SELinux 2009-03-28 15:01:36 +11:00
netlink.c
netnode.c
netport.c
nlmsgtab.c SELinux: new permission between tty audit and audit socket 2009-03-06 08:50:21 +11:00
selinuxfs.c Permissive domain in userspace object manager 2009-04-02 09:23:45 +11:00
xfrm.c CRED: Wrap current->cred and a few other accessors 2008-11-14 10:39:18 +11:00