Todd Kjos 3af7a2f610 BACKPORT: binder: use cred instead of task for selinux checks ... Since binder was integrated with selinux, it has passed 'struct task_struct' associated with the binder_proc to represent the source and target of transactions. The conversion of task to SID was then done in the hook implementations. It turns out that there are race conditions which can result in an incorrect security context being used. Fix by using the 'struct cred' saved during binder_open and pass it to the selinux subsystem. Cc: stable@vger.kernel.org # 5.14 (need backport for earlier stables) Fixes: 79af73079d ("Add security hooks to binder and implement the hooks for SELinux.") Suggested-by: Jann Horn <jannh@google.com> Signed-off-by: Todd Kjos <tkjos@google.com> Acked-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Bug: 200688826 (cherry picked from commit 52f8869337) [ refactored to avoid changing KMI: struct binder_proc ] Change-Id: I1664c1f0c2142c17e9ca0d6790bb94de79f531e3		2021-11-11 19:18:33 +00:00
..
include	ANDROID: selinux: modify RTM_GETNEIGH{TBL}	2021-06-23 14:06:26 +00:00
ss	This is the 5.10.58 stable release	2021-08-12 14:58:34 +02:00
.gitignore	.gitignore: add SPDX License Identifier	2020-03-25 11:50:48 +01:00
avc.c	selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC	2021-07-19 09:44:49 +02:00
hooks.c	BACKPORT: binder: use cred instead of task for selinux checks	2021-11-11 19:18:33 +00:00
ibpkey.c	selinux: Fix error return code in sel_ib_pkey_sid_slow()	2020-11-12 20:16:09 -05:00
Kconfig	Documentation,selinux: deprecate setting checkreqprot to 1	2020-02-10 10:49:01 -05:00
Makefile	selinux: hash context structure directly	2020-04-17 16:04:34 -04:00
netif.c	selinux: Fix spelling mistakes in the comments	2020-07-08 12:15:52 -04:00
netlabel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
netlink.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
netnode.c	selinux: Fix spelling mistakes in the comments	2020-07-08 12:15:52 -04:00
netport.c	selinux: Fix spelling mistakes in the comments	2020-07-08 12:15:52 -04:00
nlmsgtab.c	ANDROID: selinux: modify RTM_GETNEIGH{TBL}	2021-06-23 14:06:26 +00:00
selinuxfs.c	selinux: fix variable scope issue in live sidtab conversion	2021-03-30 14:31:53 +02:00
status.c	selinux: move status variables out of selinux_ss	2020-02-10 10:49:01 -05:00
xfrm.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00