Mimi Zohar
8eb613c0b8
ima: verify mprotect change is consistent with mmap policy
...
Files can be mmap'ed read/write and later changed to execute to circumvent
IMA's mmap appraise policy rules. Due to locking issues (mmap semaphore
would be taken prior to i_mutex), files can not be measured or appraised at
this point. Eliminate this integrity gap, by denying the mprotect
PROT_EXECUTE change, if an mmap appraise policy rule exists.
On mprotect change success, return 0. On failure, return -EACESS.
Reviewed-by: Lakshmi Ramasubramanian <nramas@linux.microsoft.com >
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com >
2020-05-22 14:41:04 -04:00
..
2020-04-01 08:03:28 +02:00
2020-04-18 15:44:54 -05:00
2020-04-03 15:05:35 -07:00
2020-04-01 14:47:40 -07:00
2020-03-31 21:29:04 +02:00
2020-04-08 21:25:49 -07:00
2020-04-16 10:28:12 +01:00
2020-04-08 21:29:10 -07:00
2020-04-01 18:18:18 -07:00
2020-03-31 22:08:54 +02:00
2020-04-18 15:44:55 -05:00
2020-04-10 15:36:22 -07:00
2020-03-30 11:45:18 -07:00
2020-04-18 15:44:56 -05:00
2020-04-03 15:05:35 -07:00
2020-04-07 19:44:52 -07:00
2020-04-07 13:51:39 -07:00
2020-04-02 15:50:04 -07:00
2020-04-08 21:03:40 -07:00
2020-03-31 10:05:01 -07:00
2020-04-18 15:44:54 -05:00
2020-04-07 10:43:42 -07:00
2020-04-07 10:43:43 -07:00
2020-04-18 15:44:54 -05:00
2020-04-01 14:56:44 -06:00
2020-04-18 15:44:54 -05:00
2020-03-30 14:59:53 -07:00
2020-03-30 17:36:33 -07:00
2020-03-30 19:52:37 -07:00
2020-04-15 23:58:48 -04:00
2020-04-03 11:30:20 -07:00
2020-04-10 15:36:21 -07:00
2020-03-31 11:04:05 -07:00
2020-04-07 10:43:42 -07:00
2020-04-07 10:43:42 -07:00
2020-04-18 15:44:55 -05:00
2020-04-03 11:32:13 -04:00
2020-04-02 19:15:03 -07:00
2020-04-01 14:47:40 -07:00
2020-04-07 10:45:15 +02:00
2020-04-02 19:15:03 -07:00
2020-04-08 11:00:00 -07:00
2020-04-18 15:44:54 -05:00
2020-04-18 15:44:54 -05:00
2020-03-31 11:04:05 -07:00
2020-04-18 15:44:54 -05:00
2020-04-18 15:44:54 -05:00
2020-04-18 15:44:54 -05:00
2020-04-04 11:58:55 -07:00
2020-04-18 15:44:54 -05:00
2020-04-07 10:43:38 -07:00
2020-04-07 10:43:39 -07:00
2020-04-02 09:35:32 -07:00
2020-04-10 15:36:21 -07:00
2020-04-15 11:48:21 +02:00
2020-04-18 15:44:55 -05:00
2020-04-18 15:44:55 -05:00
2020-05-22 14:41:04 -04:00
2020-04-19 11:23:33 -07:00
2020-04-01 13:20:14 +02:00
2020-04-02 09:35:30 -07:00
2020-04-02 09:35:25 -07:00
2020-03-30 18:51:47 -07:00
2020-03-31 10:48:03 -04:00
2020-04-06 22:55:27 +02:00
2020-03-31 17:29:33 -07:00
2020-04-18 15:44:55 -05:00
2020-03-31 17:29:33 -07:00
2020-04-10 15:36:21 -07:00
2020-04-18 15:44:55 -05:00
2020-04-10 15:36:21 -07:00
2020-04-07 10:43:40 -07:00
2020-04-02 09:35:31 -07:00
2020-04-08 21:03:40 -07:00
2020-04-07 10:43:38 -07:00
2020-04-07 10:43:41 -07:00
2020-04-10 15:36:21 -07:00
2020-04-08 21:03:40 -07:00
2020-04-03 13:22:40 -07:00
2020-03-30 19:52:37 -07:00
2020-04-06 13:56:33 -04:00
2020-04-01 13:37:57 -04:00
2020-04-07 13:51:39 -07:00
2020-04-04 09:09:39 +02:00
2020-04-02 09:35:27 -07:00
2020-04-07 10:43:39 -07:00
2020-04-07 10:43:38 -07:00
2020-04-07 10:43:38 -07:00
2020-04-03 14:25:02 -07:00
2020-04-02 17:57:10 +01:00
2020-04-02 17:57:10 +01:00
2020-04-03 14:25:02 -07:00
2020-04-07 10:43:43 -07:00
2020-03-30 11:52:27 -07:00
2020-04-09 12:15:35 -05:00
2020-04-01 08:06:54 +02:00
2020-04-18 15:44:55 -05:00
2020-04-10 13:18:57 -07:00
2020-04-07 10:43:42 -07:00
2020-04-02 11:22:17 -07:00
2020-04-08 12:05:07 +02:00
2020-04-18 15:44:56 -05:00
2020-04-18 15:44:56 -05:00
2020-04-02 18:47:30 +02:00
2020-04-02 11:22:17 -07:00
2020-03-31 15:49:51 -07:00
2020-04-07 10:43:42 -07:00
2020-04-07 10:43:38 -07:00
2020-04-18 15:44:56 -05:00
2020-04-10 15:36:20 -07:00
2020-03-30 12:18:49 -07:00
2020-04-07 10:43:43 -07:00
2020-04-18 15:44:56 -05:00
2020-04-07 10:43:41 -07:00
2020-04-05 11:34:35 -07:00
2020-04-18 15:44:56 -05:00
2020-03-30 18:51:47 -07:00
2020-03-30 14:59:53 -07:00
2020-04-02 09:35:26 -07:00
2020-04-18 15:44:56 -05:00
2020-04-07 10:43:39 -07:00
2020-04-01 12:06:26 -04:00
2020-04-01 12:06:26 -04:00
2020-04-07 10:43:38 -07:00
2020-04-01 12:06:26 -04:00
2020-04-03 12:27:36 -07:00
2020-04-18 15:44:56 -05:00