linux/security/apparmor
John Johansen 96af45154a apparmor: Fix regression in mount mediation
[ Upstream commit 157a3537d6 ]

commit 2db154b3ea ("vfs: syscall: Add move_mount(2) to move mounts around")

introduced a new move_mount(2) system call and a corresponding new LSM
security_move_mount hook but did not implement this hook for any
existing LSM. This creates a regression for AppArmor mediation of
mount. This patch provides a base mapping of the move_mount syscall to
the existing mount mediation. In the future we may introduce
additional mediations around the new mount calls.

Fixes: 2db154b3ea ("vfs: syscall: Add move_mount(2) to move mounts around")
CC: stable@vger.kernel.org
Reported-by: Andreas Steinmetz <anstein99@googlemail.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-11-28 17:20:07 +00:00
..
include apparmor: Fix regression in mount mediation 2023-11-28 17:20:07 +00:00
.gitignore
apparmorfs.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
audit.c apparmor: rename audit_data->label to audit_data->subj_label 2023-11-28 17:20:07 +00:00
capability.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
crypto.c
domain.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
file.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
ipc.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
Kconfig
label.c
lib.c apparmor: rename audit_data->label to audit_data->subj_label 2023-11-28 17:20:07 +00:00
lsm.c apparmor: Fix regression in mount mediation 2023-11-28 17:20:07 +00:00
Makefile
match.c
mount.c apparmor: Fix regression in mount mediation 2023-11-28 17:20:07 +00:00
net.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
nulldfa.in
path.c
policy_compat.c + Bug Fixes 2023-07-07 09:55:31 -07:00
policy_ns.c
policy_unpack_test.c
policy_unpack.c apparmor: combine common_audit_data and apparmor_audit_data 2023-11-28 17:20:07 +00:00
policy.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
procattr.c
resource.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00
secid.c
stacksplitdfa.in
task.c apparmor: pass cred through to audit info. 2023-11-28 17:20:07 +00:00