]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/commit
projects / mirror_ubuntu-artful-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: afdbd4a) | patch
UBUNTU: SAUCE: (namespace) evm: Don't update hmacs in user ns mounts
authorSeth Forshee <seth.forshee@canonical.com>
Thu, 15 Dec 2016 17:03:08 +0000 (11:03 -0600)
committerSeth Forshee <seth.forshee@canonical.com>
Tue, 5 Sep 2017 12:33:40 +0000 (07:33 -0500)
commite2f7dbcf2dc570cfc90a7b77407d9ab3afb60d28
tree1326aacb1f3084803498e2f36ec2a10af3ee3ff1tree
parentafdbd4a626fc387896e12cbb17fce7314b8d5cddcommit | diff
UBUNTU: SAUCE: (namespace) evm: Don't update hmacs in user ns mounts

The kernel should not calculate new hmacs for mounts done by
non-root users. Update evm_calc_hmac_or_hash() to refuse to
calculate new hmacs for mounts for non-init user namespaces.

Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
security/integrity/evm/evm_crypto.c diff | blob | blame | history
Ubuntu Artful kernel mirror