Message ID | 20181105190504.500-4-casey.schaufler@intel.com (mailing list archive) |
---|---|
State | Not Applicable |
Headers | show
Return-Path: <selinux-bounces@tycho.nsa.gov> Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 34E211709 for <patchwork-selinux@patchwork.kernel.org>; Mon, 5 Nov 2018 19:38:40 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 1F03E29935 for <patchwork-selinux@patchwork.kernel.org>; Mon, 5 Nov 2018 19:38:36 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 0D9342993F; Mon, 5 Nov 2018 19:38:36 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.9 required=2.0 tests=BAYES_00,MAILING_LIST_MULTI autolearn=ham version=3.3.1 Received: from upbd19pa12.eemsg.mail.mil (upbd19pa12.eemsg.mail.mil [214.24.27.87]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA256 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 7318729935 for <patchwork-selinux@patchwork.kernel.org>; Mon, 5 Nov 2018 19:38:34 +0000 (UTC) X-EEMSG-check-008: 168096524|UPBD19PA12_EEMSG_MP12.csd.disa.mil Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by upbd19pa12.eemsg.mail.mil with ESMTP; 05 Nov 2018 19:38:30 +0000 X-IronPort-AV: E=Sophos;i="5.54,469,1534809600"; d="scan'208";a="20293301" IronPort-PHdr: 9a23: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 X-IPAS-Result: A2CpAADXm+Bb/wHyM5BlHAEBAQQBAQcEAQGBVAQBAQsBggSBZRYSjG2LOYINkjaFC4FcFxgTAYgTIjcKDQEDAQEBAQEBAgFsKII2JIJhAwMBAjcUIA4DCQEBHyEICAMBLRURBwcLBRgEgwCCAqt7iiCHToQogVg/gRGHXQESAYV6Ao83M49IBwKCFASObgsYkGAslxqBWSJkcU0jUIJsgicXjjxOgQUBAYpQgj4BAQ Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 05 Nov 2018 19:38:29 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id wA5JcP4Q029222; Mon, 5 Nov 2018 14:38:26 -0500 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id wA5J58fM032795 for <selinux@prometheus.infosec.tycho.ncsc.mil>; Mon, 5 Nov 2018 14:05:08 -0500 Received: from goalie.tycho.ncsc.mil (goalie.tycho.ncsc.mil [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id wA5J58wu024103 for <selinux@tycho.nsa.gov>; Mon, 5 Nov 2018 14:05:08 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1BZAAANlOBbfSNjr8ZlHQEBBQEHBQGBUgcBCwGDaRYSmCaCDZI2hHeBeg2EbAKDUSI1DA0BAwEBAQEBAQIUAQEWOoVqAwOBCSAxVwcSgyGCAqtviiCHToQogVg/gRGNawKPao9IBwKCFASObgsYkGAslxqBRAE1gVZNI4M8gicXjjweMI4VAQE X-IPAS-Result: A1BZAAANlOBbfSNjr8ZlHQEBBQEHBQGBUgcBCwGDaRYSmCaCDZI2hHeBeg2EbAKDUSI1DA0BAwEBAQEBAQIUAQEWOoVqAwOBCSAxVwcSgyGCAqtviiCHToQogVg/gRGNawKPao9IBwKCFASObgsYkGAslxqBRAE1gVZNI4M8gicXjjweMI4VAQE X-IronPort-AV: E=Sophos;i="5.54,468,1534824000"; d="scan'208";a="407574" Received: from emsm-gh1-uea11.corp.nsa.gov (HELO emsm-gh1-uea11.nsa.gov) ([10.208.41.37]) by goalie.tycho.ncsc.mil with ESMTP; 05 Nov 2018 14:05:07 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0FZAAAhk+BbfSNjr8ZlHQEBBQEHBQGBUgcBCwGDaRYSmCaCDZI2hHeBeg2EbAKDUiI1DA0BAwEBAQEBAQIBAQIQAQEWOi+CNiKCZAMDgQkgMVcHEoMhggKrZ4ogh06EKIFYP4ERjWsCj2qPSAcCghQEjm4LGJBgLJcagUQBNYFXTSODPIInF448HjCOFQEB X-IPAS-Result: A0FZAAAhk+BbfSNjr8ZlHQEBBQEHBQGBUgcBCwGDaRYSmCaCDZI2hHeBeg2EbAKDUiI1DA0BAwEBAQEBAQIBAQIQAQEWOi+CNiKCZAMDgQkgMVcHEoMhggKrZ4ogh06EKIFYP4ERjWsCj2qPSAcCghQEjm4LGJBgLJcagUQBNYFXTSODPIInF448HjCOFQEB X-IronPort-AV: E=Sophos;i="5.54,468,1534809600"; d="scan'208";a="7677510" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from fmsmga002-icc.fm.intel.com ([198.175.99.35]) by emsm-gh1-uea11.nsa.gov with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 05 Nov 2018 19:05:07 +0000 Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga002-icc.fm.intel.com with ESMTP; 05 Nov 2018 11:05:06 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,468,1534834800"; d="scan'208";a="271567363" Received: from cschaufl-mobl.amr.corp.intel.com ([10.254.103.117]) by orsmga005.jf.intel.com with ESMTP; 05 Nov 2018 11:05:06 -0800 From: Casey Schaufler <casey.schaufler@intel.com> To: kernel-hardening@lists.openwall.com, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, selinux@tycho.nsa.gov, casey.schaufler@intel.com, dave.hansen@intel.com, deneen.t.dock@intel.com, kristen@linux.intel.com, arjan@linux.intel.com Date: Mon, 5 Nov 2018 11:05:02 -0800 Message-Id: <20181105190504.500-4-casey.schaufler@intel.com> X-Mailer: git-send-email 2.17.0 In-Reply-To: <20181105190504.500-1-casey.schaufler@intel.com> References: <20181105190504.500-1-casey.schaufler@intel.com> X-Mailman-Approved-At: Mon, 05 Nov 2018 14:36:17 -0500 Subject: [PATCH v6 3/5] SELinux: Prepare for PTRACE_MODE_SCHED X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" <selinux.tycho.nsa.gov> List-Post: <mailto:selinux@tycho.nsa.gov> List-Help: <mailto:selinux-request@tycho.nsa.gov?subject=help> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" <selinux-bounces@tycho.nsa.gov> X-Virus-Scanned: ClamAV using ClamSMTP |
Series |
LSM: Support ptrace sidechannel access checks
|
expand
|
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index ad9a9b8e9979..160239791007 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -2267,6 +2267,8 @@ static int selinux_ptrace_access_check(struct task_struct *child, u32 sid = current_sid(); u32 csid = task_sid(child); + if (mode & PTRACE_MODE_SCHED) + return sid == csid ? 0 : -EACCES; if (mode & PTRACE_MODE_READ) return avc_has_perm(&selinux_state, sid, csid, SECCLASS_FILE, FILE__READ, NULL);