Paul Moore 7928396df9 proc: prevent changes to overridden credentials ...

commit 35a196bef4 upstream.

Prevent userspace from changing the the /proc/PID/attr values if the
task's credentials are currently overriden.  This not only makes sense
conceptually, it also prevents some really bizarre error cases caused
when trying to commit credentials to a task with overridden
credentials.

Cc: <stable@vger.kernel.org>
Reported-by: "chengjian (D)" <cj.chengjian@huawei.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Acked-by: John Johansen <john.johansen@canonical.com>
Acked-by: James Morris <james.morris@microsoft.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-05-25 18:23:25 +02:00

..

array.c

proc: use "unsigned int" for sigqueue length

2018-06-07 17:34:38 -07:00

base.c

proc: prevent changes to overridden credentials

2019-05-25 18:23:25 +02:00

cmdline.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

consoles.c

proc: introduce proc_create_seq{,_data}

2018-05-16 07:23:35 +02:00

cpuinfo.c

x86 / CPU: Always show current CPU frequency in /proc/cpuinfo

2017-11-15 19:46:50 +01:00

devices.c

proc: introduce proc_create_seq{,_data}

2018-05-16 07:23:35 +02:00

fd.c

proc: use "unsigned int" in proc_fill_cache()

2018-06-07 17:34:38 -07:00

fd.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

generic.c

proc: fix /proc/net/* after setns(2)

2019-03-13 14:02:32 -07:00

inode.c

proc: fixup PDE allocation bloat

2018-08-22 10:52:45 -07:00

internal.h

proc: fix /proc/net/* after setns(2)

2019-03-13 14:02:32 -07:00

interrupts.c

proc: introduce proc_create_seq{,_data}

2018-05-16 07:23:35 +02:00

Kconfig

proc/kcore: add vmcoreinfo note to /proc/kcore

2018-08-22 10:52:46 -07:00

kcore.c

x86/gart: Exclude GART aperture from kcore

2019-04-20 09:15:59 +02:00

kmsg.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

loadavg.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

Makefile

proc: : uninline name_to_int()

2017-11-17 16:10:00 -08:00

meminfo.c

/proc/meminfo: add percpu populated pages count

2018-08-22 10:52:45 -07:00

namespaces.c

procfs: switch instantiate_t to d_splice_alias()

2018-05-26 14:20:50 -04:00

nommu.c

proc: introduce proc_create_seq{,_data}

2018-05-16 07:23:35 +02:00

page.c

mm: mark pages in use for page tables

2018-06-07 17:34:37 -07:00

proc_net.c

proc: fix /proc/net/* after setns(2)

2019-03-13 14:02:32 -07:00

proc_sysctl.c

fs/proc/proc_sysctl.c: Fix a NULL pointer dereference

2019-05-02 09:58:56 +02:00

proc_tty.c

tty: replace ->proc_fops with ->proc_show

2018-05-16 07:24:30 +02:00

root.c

proc: Make inline name size calculation automatic

2018-06-15 00:48:57 -04:00

self.c

proc: introduce a proc_pid_ns helper

2018-05-16 07:23:35 +02:00

softirqs.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

stat.c

proc: use "unsigned int" in /proc/stat hook

2018-08-22 10:52:46 -07:00

task_mmu.c

coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

2019-04-27 09:36:37 +02:00

task_nommu.c

mm: /proc/pid/*maps remove is_pid and related wrappers

2018-08-22 10:52:44 -07:00

thread_self.c

proc: introduce a proc_pid_ns helper

2018-05-16 07:23:35 +02:00

uptime.c

fs/proc/uptime.c: use ktime_get_boottime_ts64

2018-08-22 10:52:45 -07:00

util.c

proc: use do-while in name_to_int()

2017-11-17 16:10:00 -08:00

version.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

vmcore.c

fs/proc/vmcore.c: hide vmcoredd_mmap_dumps() for nommu builds

2018-08-23 18:48:43 -07:00