Mimi Zohar
8eb613c0b8
ima: verify mprotect change is consistent with mmap policy
...
Files can be mmap'ed read/write and later changed to execute to circumvent
IMA's mmap appraise policy rules. Due to locking issues (mmap semaphore
would be taken prior to i_mutex), files can not be measured or appraised at
this point. Eliminate this integrity gap, by denying the mprotect
PROT_EXECUTE change, if an mmap appraise policy rule exists.
On mprotect change success, return 0. On failure, return -EACESS.
Reviewed-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com >
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com >
2020-05-22 14:41:04 -04:00
..
2020-04-18 15:44:54 -05:00
2020-04-03 15:05:35 -07:00
2020-04-08 21:25:49 -07:00
2020-04-16 10:28:12 +01:00
2020-04-08 21:29:10 -07:00
2020-04-18 15:44:55 -05:00
2020-04-10 15:36:22 -07:00
2020-04-18 15:44:56 -05:00
2020-04-03 15:05:35 -07:00
2020-04-07 19:44:52 -07:00
2020-04-07 13:51:39 -07:00
2020-04-08 21:03:40 -07:00
2019-12-04 13:32:45 +10:00
2020-04-18 15:44:54 -05:00
2020-04-07 10:43:42 -07:00
2020-04-07 10:43:43 -07:00
2020-04-18 15:44:54 -05:00
2020-04-18 15:44:54 -05:00
2020-01-22 23:04:52 +01:00
2020-04-15 23:58:48 -04:00
2019-06-19 17:09:55 +02:00
2020-04-03 11:30:20 -07:00
2020-04-10 15:36:21 -07:00
2017-11-02 11:10:55 +01:00
2020-04-07 10:43:42 -07:00
2020-04-07 10:43:42 -07:00
2020-04-18 15:44:55 -05:00
2020-04-03 11:32:13 -04:00
2020-04-07 10:45:15 +02:00
2020-04-08 11:00:00 -07:00
2020-04-18 15:44:54 -05:00
2020-04-18 15:44:54 -05:00
2020-04-18 15:44:54 -05:00
2020-04-18 15:44:54 -05:00
2020-04-18 15:44:54 -05:00
2020-04-04 11:58:55 -07:00
2020-04-18 15:44:54 -05:00
2020-04-07 10:43:38 -07:00
2019-05-30 11:26:35 -07:00
2020-04-07 10:43:39 -07:00
2020-04-10 15:36:21 -07:00
2020-04-15 11:48:21 +02:00
2020-04-18 15:44:55 -05:00
2020-04-18 15:44:55 -05:00
2020-05-22 14:41:04 -04:00
2020-04-19 11:23:33 -07:00
2017-11-02 11:10:55 +01:00
2020-04-06 22:55:27 +02:00
2020-04-18 15:44:55 -05:00
2020-04-10 15:36:21 -07:00
2020-04-18 15:44:55 -05:00
2020-04-10 15:36:21 -07:00
2020-04-07 10:43:40 -07:00
2020-04-08 21:03:40 -07:00
2020-04-07 10:43:38 -07:00
2020-04-07 10:43:41 -07:00
2020-04-10 15:36:21 -07:00
2020-04-08 21:03:40 -07:00
2020-04-03 13:22:40 -07:00
2019-12-01 12:59:05 -08:00
2019-12-09 10:55:03 +01:00
2020-04-06 13:56:33 -04:00
2020-04-07 13:51:39 -07:00
2020-04-04 09:09:39 +02:00
2019-01-22 10:21:45 +01:00
2020-04-07 10:43:39 -07:00
2020-04-07 10:43:38 -07:00
2020-04-07 10:43:38 -07:00
2020-04-03 14:25:02 -07:00
2020-04-03 14:25:02 -07:00
2020-04-07 10:43:43 -07:00
2020-04-09 12:15:35 -05:00
2017-11-02 11:10:55 +01:00
2020-04-18 15:44:55 -05:00
2019-06-05 17:37:04 +02:00
2020-04-10 13:18:57 -07:00
2020-04-07 10:43:42 -07:00
2020-04-08 12:05:07 +02:00
2020-04-18 15:44:56 -05:00
2020-04-18 15:44:56 -05:00
2020-04-07 10:43:42 -07:00
2020-04-07 10:43:38 -07:00
2020-04-18 15:44:56 -05:00
2020-04-10 15:36:20 -07:00
2020-04-07 10:43:43 -07:00
2020-04-18 15:44:56 -05:00
2020-04-07 10:43:41 -07:00
2020-04-05 11:34:35 -07:00
2020-04-18 15:44:56 -05:00
2019-02-07 00:13:28 +01:00
2020-04-18 15:44:56 -05:00
2020-04-07 10:43:39 -07:00
2020-04-07 10:43:38 -07:00
2020-04-03 12:27:36 -07:00
2020-04-18 15:44:56 -05:00