Goldwyn Rodrigues 8b259b9965 ima: open a new file instance if no read permissions ... commit a408e4a86b upstream. Open a new file instance as opposed to changing file->f_mode when the file is not readable. This is done to accomodate overlayfs stacked file operations change. The real struct file is hidden behind the overlays struct file. So, any file->f_mode manipulations are not reflected on the real struct file. Open the file again in read mode if original file cannot be read, read and calculate the hash. Signed-off-by: Goldwyn Rodrigues <rgoldwyn@suse.com> Cc: stable@vger.kernel.org (linux-4.19) Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-11-13 11:08:46 -08:00
..
apparmor	apparmor: fix bad debug check in apparmor_secid_to_secctx()	2018-09-03 11:15:29 -07:00
integrity	ima: open a new file instance if no read permissions	2018-11-13 11:08:46 -08:00
keys	Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name"	2018-09-25 13:28:58 +02:00
loadpin	module: replace the existing LSM hook in init_module	2018-07-16 12:31:57 -07:00
selinux	selinux: fix mounting of cgroup2 under older policies	2018-11-13 11:08:44 -08:00
smack	Smack: ptrace capability use fixes	2018-11-13 11:08:36 -08:00
tomoyo	Kbuild updates for v4.19	2018-08-15 12:09:03 -07:00
yama
commoncap.c	cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()	2018-08-11 02:05:53 -05:00
device_cgroup.c	docs: fix broken references with multiple hints	2018-06-15 18:10:01 -03:00
inode.c
Kconfig	Revert "x86/mm/legacy: Populate the user page-table with user pgd's"	2018-09-14 17:08:45 +02:00
lsm_audit.c
Makefile
min_addr.c
security.c	init: allow initcall tables to be emitted using relative references	2018-08-22 10:52:47 -07:00