UBUNTU: SAUCE: LSM stacking: inherit current display LSM

If a current display LSM is set it should be inherited. As per 2017
LSS discussion.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>

diff --git a/security/security.c b/security/security.c
index d7ee5f8b8cfeda1a22004c9eec6176f10400b628..72f38cbadbb7da6bc352a395c5c97f6c747032a4 100644 (file)
--- a/security/security.c
+++ b/security/security.c
@@ -452,6 +452,12 @@ int lsm_task_alloc(struct task_struct *task)
        task->security = kzalloc(blob_sizes.lbs_task, GFP_KERNEL);
        if (task->security == NULL)
                return -ENOMEM;
+
+       /* inherit current display lsm */
+#ifdef CONFIG_SECURITY_STACKING
+       if (current->security)
+               strcpy(task->security, lsm_of_task(current));
+#endif
        return 0;
 }