mirror of
git://git.yoctoproject.org/linux-yocto.git
synced 2025-08-21 16:31:14 +02:00
54a6e6bbf3
Currently, a sandbox process is not restricted to sending a signal (e.g. SIGKILL) to a process outside the sandbox environment. The ability to send a signal for a sandboxed process should be scoped the same way abstract UNIX sockets are scoped. Therefore, we extend the "scoped" field in a ruleset with LANDLOCK_SCOPE_SIGNAL to specify that a ruleset will deny sending any signal from within a sandbox process to its parent (i.e. any parent sandbox or non-sandboxed processes). This patch adds file_set_fowner and file_free_security hooks to set and release a pointer to the file owner's domain. This pointer, fown_domain in landlock_file_security will be used in file_send_sigiotask to check if the process can send a signal. The ruleset_with_unknown_scope test is updated to support LANDLOCK_SCOPE_SIGNAL. This depends on two new changes: - commit1934b21261("file: reclaim 24 bytes from f_owner"): replace container_of(fown, struct file, f_owner) with fown->file . - commit26f204380a("fs: Fix file_set_fowner LSM hook inconsistencies"): lock before calling the hook. Signed-off-by: Tahera Fahimi <fahimitahera@gmail.com> Closes: https://github.com/landlock-lsm/linux/issues/8 Link: https://lore.kernel.org/r/df2b4f880a2ed3042992689a793ea0951f6798a5.1725657727.git.fahimitahera@gmail.com [mic: Update landlock_get_current_domain()'s return type, improve and fix locking in hook_file_set_fowner(), simplify and fix sleepable call and locking issue in hook_file_send_sigiotask() and rebase on the latest VFS tree, simplify hook_task_kill() and quickly return when not sandboxed, improve comments, rename LANDLOCK_SCOPED_SIGNAL] Co-developed-by: Mickaël Salaün <mic@digikod.net> Signed-off-by: Mickaël Salaün <mic@digikod.net>
34 lines
676 B
C
34 lines
676 B
C
// SPDX-License-Identifier: GPL-2.0
|
|
/*
|
|
* Landlock tests - Common scope restriction
|
|
*
|
|
* Copyright © 2024 Tahera Fahimi <fahimitahera@gmail.com>
|
|
*/
|
|
|
|
#define _GNU_SOURCE
|
|
#include <errno.h>
|
|
#include <linux/landlock.h>
|
|
#include <sys/prctl.h>
|
|
|
|
#include "common.h"
|
|
|
|
#define ACCESS_LAST LANDLOCK_SCOPE_SIGNAL
|
|
|
|
TEST(ruleset_with_unknown_scope)
|
|
{
|
|
__u64 scoped_mask;
|
|
|
|
for (scoped_mask = 1ULL << 63; scoped_mask != ACCESS_LAST;
|
|
scoped_mask >>= 1) {
|
|
struct landlock_ruleset_attr ruleset_attr = {
|
|
.scoped = scoped_mask,
|
|
};
|
|
|
|
ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr,
|
|
sizeof(ruleset_attr), 0));
|
|
ASSERT_EQ(EINVAL, errno);
|
|
}
|
|
}
|
|
|
|
TEST_HARNESS_MAIN
|