Zichen Xie and Greg Kroah-Hartman
a7e98a8599
samples/landlock: Fix possible NULL dereference in parse_path()
...
[ Upstream commit 078bf9438a ]
malloc() may return NULL, leading to NULL dereference. Add a NULL
check.
Fixes: ba84b0bf5a ("samples/landlock: Add a sandbox manager example")
Signed-off-by: Zichen Xie <zichenxie0106@gmail.com >
Link: https://lore.kernel.org/r/20241128032955.11711-1-zichenxie0106@gmail.com
[mic: Simplify fix]
Signed-off-by: Mickaël Salaün <mic@digikod.net >
Signed-off-by: Sasha Levin <sashal@kernel.org >
2025-03-13 12:49:57 +01:00
Mickaël Salaün and Greg Kroah-Hartman
ef35061172
samples/landlock: Format with clang-format
...
commit 81709f3dcc upstream.
Let's follow a consistent and documented coding style. Everything may
not be to our liking but it is better than tacit knowledge. Moreover,
this will help maintain style consistency between different developers.
This contains only whitespace changes.
Automatically formatted with:
clang-format-14 -i samples/landlock/*.[ch]
Link: https://lore.kernel.org/r/20220506160513.523257-8-mic@digikod.net
Cc: stable@vger.kernel.org
Signed-off-by: Mickaël Salaün <mic@digikod.net >
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org >
2022-06-09 10:23:23 +02:00
Mickaël Salaün and Greg Kroah-Hartman
ace6246919
samples/landlock: Add clang-format exceptions
...
commit 9805a722db upstream.
In preparation to a following commit, add clang-format on and
clang-format off stanzas around constant definitions. This enables to
keep aligned values, which is much more readable than packed
definitions.
Link: https://lore.kernel.org/r/20220506160513.523257-7-mic@digikod.net
Cc: stable@vger.kernel.org
Signed-off-by: Mickaël Salaün <mic@digikod.net >
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org >
2022-06-09 10:23:23 +02:00
Tom Rix and Greg Kroah-Hartman
20fbf100f8
samples/landlock: Fix path_list memory leak
...
commit 66b513b7c6 upstream.
Clang static analysis reports this error
sandboxer.c:134:8: warning: Potential leak of memory
pointed to by 'path_list'
ret = 0;
^
path_list is allocated in parse_path() but never freed.
Signed-off-by: Tom Rix <trix@redhat.com >
Link: https://lore.kernel.org/r/20210428213852.2874324-1-trix@redhat.com
Cc: stable@vger.kernel.org
Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com >
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org >
2022-04-08 14:22:59 +02:00
Mickaël Salaün and James Morris
ba84b0bf5a
samples/landlock: Add a sandbox manager example
...
Add a basic sandbox tool to launch a command which can only access a
list of file hierarchies in a read-only or read-write way.
Cc: James Morris <jmorris@namei.org >
Cc: Serge E. Hallyn <serge@hallyn.com >
Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com >
Reviewed-by: Jann Horn <jannh@google.com >
Reviewed-by: Kees Cook <keescook@chromium.org >
Link: https://lore.kernel.org/r/20210422154123.13086-12-mic@digikod.net
Signed-off-by: James Morris <jamorris@linux.microsoft.com >
2021-04-22 12:22:11 -07:00