Mickaël Salaün cc30d05b34 landlock: Fix d_parent walk ... commit 88da52ccd6 upstream. The WARN_ON_ONCE() in collect_domain_accesses() can be triggered when trying to link a root mount point. This cannot work in practice because this directory is mounted, but the VFS check is done after the call to security_path_link(). Do not use source directory's d_parent when the source directory is the mount point. Cc: Günther Noack <gnoack@google.com> Cc: Paul Moore <paul@paul-moore.com> Cc: stable@vger.kernel.org Reported-by: syzbot+bf4903dc7e12b18ebc87@syzkaller.appspotmail.com Fixes: b91c3e4ea7 ("landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER") Closes: https://lore.kernel.org/r/000000000000553d3f0618198200@google.com Link: https://lore.kernel.org/r/20240516181935.1645983-2-mic@digikod.net [mic: Fix commit message] Signed-off-by: Mickaël Salaün <mic@digikod.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-06-21 14:38:24 +02:00
..
apparmor	apparmor: avoid crash when parsed profile name is empty	2024-01-25 15:35:54 -08:00
bpf
integrity	ima: detect changes to the backing overlay file	2023-11-28 17:20:03 +00:00
keys	KEYS: trusted: Do not use WARN when encode fails	2024-05-25 16:22:55 +02:00
landlock	landlock: Fix d_parent walk	2024-06-21 14:38:24 +02:00
loadpin
lockdown
safesetid
selinux	selinux: avoid dereference of garbage after mount failure	2024-04-10 16:35:48 +02:00
smack	smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()	2024-04-03 15:28:16 +02:00
tomoyo	tomoyo: fix UAF write bug in tomoyo_write_control()	2024-03-06 14:48:39 +00:00
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c	lsm: fix the logic in security_inode_getsecctx()	2024-02-23 09:25:02 +01:00