]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
apparmorfs: fix use-after-free on symlink traversal
authorAl Viro <viro@zeniv.linux.org.uk>
Wed, 10 Apr 2019 18:04:34 +0000 (14:04 -0400)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Wed, 14 Aug 2019 09:18:49 +0000 (11:18 +0200)
commit4e6a530821cbc210ccc3371c446a01fa7b884878
treead58e29d551bec163b0489eb58a14dbeb0c58a73
parentd88b531930073626d300edf071f2f814e49a220d
apparmorfs: fix use-after-free on symlink traversal

BugLink: https://bugs.launchpad.net/bugs/1838576
[ Upstream commit f51dcd0f621caac5380ce90fbbeafc32ce4517ae ]

symlink body shouldn't be freed without an RCU delay.  Switch apparmorfs
to ->destroy_inode() and use of call_rcu(); free both the inode and symlink
body in the callback.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
security/apparmor/apparmorfs.c