OpenCloudOS-Kernel/security/apparmor
John Johansen 96af45154a apparmor: Fix regression in mount mediation
[ Upstream commit 157a3537d6bc28ceb9a11fc8cb67f2152d860146 ]

commit 2db154b3ea ("vfs: syscall: Add move_mount(2) to move mounts around")

introduced a new move_mount(2) system call and a corresponding new LSM
security_move_mount hook but did not implement this hook for any
existing LSM. This creates a regression for AppArmor mediation of
mount. This patch provides a base mapping of the move_mount syscall to
the existing mount mediation. In the future we may introduce
additional mediations around the new mount calls.

Fixes: 2db154b3ea ("vfs: syscall: Add move_mount(2) to move mounts around")
CC: stable@vger.kernel.org
Reported-by: Andreas Steinmetz <anstein99@googlemail.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-11-28 17:20:07 +00:00
..
include apparmor: Fix regression in mount mediation 2023-11-28 17:20:07 +00:00
.gitignore .gitignore: add SPDX License Identifier 2020-03-25 11:50:48 +01:00
Kconfig + Features 2022-12-14 13:42:09 -08:00
Makefile + Features 2022-12-14 13:42:09 -08:00
apparmorfs.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
audit.c apparmor: rename audit_data->label to audit_data->subj_label 2023-11-28 17:20:07 +00:00
capability.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
crypto.c apparmor: Return directly after a failed kzalloc() in two functions 2023-07-06 10:58:49 -07:00
domain.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
file.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
ipc.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
label.c apparmor: remove useless static inline functions 2022-10-24 22:35:11 -07:00
lib.c apparmor: rename audit_data->label to audit_data->subj_label 2023-11-28 17:20:07 +00:00
lsm.c apparmor: Fix regression in mount mediation 2023-11-28 17:20:07 +00:00
match.c apparmor: Add __init annotation to aa_{setup/teardown}_dfa_engine() 2022-11-01 21:17:26 -07:00
mount.c apparmor: Fix regression in mount mediation 2023-11-28 17:20:07 +00:00
net.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
nulldfa.in apparmor: cleanup add proper line wrapping to nulldfa.in 2018-02-09 11:30:01 -08:00
path.c security: apparmor: delete repeated words in comments 2021-02-07 04:15:46 -08:00
policy.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
policy_compat.c + Bug Fixes 2023-07-07 09:55:31 -07:00
policy_ns.c apparmor: Fix memleak in alloc_ns() 2022-11-01 05:32:13 -07:00
policy_unpack.c apparmor: combine common_audit_data and apparmor_audit_data 2023-11-28 17:20:07 +00:00
policy_unpack_test.c apparmor: fix use of strcpy in policy_unpack_test 2023-07-06 10:58:49 -07:00
procattr.c apparmor: fix obsoleted comments for aa_getprocattr() and audit_resource() 2022-10-24 22:35:23 -07:00
resource.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
secid.c apparmor: fix kernel-doc complaints 2023-01-10 10:04:35 -08:00
stacksplitdfa.in apparmor: use the dfa to do label parse string splitting 2018-02-09 11:30:01 -08:00
task.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00