]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit - security/selinux/hooks.c
selinux: apply execstack check on thread stacks
authorStephen Smalley <sds@tycho.nsa.gov>
Fri, 8 Apr 2016 17:55:03 +0000 (13:55 -0400)
committerPaul Moore <paul@paul-moore.com>
Tue, 26 Apr 2016 19:47:57 +0000 (15:47 -0400)
commitc2316dbf124257ae19fd2e29cb5ec51060649d38
treea17220dace4ef3946ee7185a344fa9e735472a56
parent8e4ff6f228e4722cac74db716e308d1da33d744f
selinux: apply execstack check on thread stacks

The execstack check was only being applied on the main
process stack.  Thread stacks allocated via mmap were
only subject to the execmem permission check.  Augment
the check to apply to the current thread stack as well.
Note that this does NOT prevent making a different thread's
stack executable.

Suggested-by: Nick Kralevich <nnk@google.com>
Acked-by: Nick Kralevich <nnk@google.com>
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/hooks.c