linux-stable-mirror

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-04-24 10:49:54 +02:00

Files

T

Todd Kjos ff1bd01f49 binder: use euid from cred instead of using task

commit 29bc22ac5e upstream.

Save the 'struct cred' associated with a binder process
at initial open to avoid potential race conditions
when converting to an euid.

Set a transaction's sender_euid from the 'struct cred'
saved at binder_open() instead of looking up the euid
from the binder proc's 'struct task'. This ensures
the euid is associated with the security context that
of the task that opened binder.

Cc: stable@vger.kernel.org # 4.4+
Fixes: 457b9a6f09 ("Staging: android: add binder driver")
Signed-off-by: Todd Kjos <tkjos@google.com>
Suggested-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Suggested-by: Jann Horn <jannh@google.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-11-12 15:05:48 +01:00

binder_alloc_selftest.c

binder: print warnings when detecting oneway spamming.

2020-09-03 18:24:41 +02:00

binder_alloc.c

binder: tell userspace to dump current backtrace when detected oneway spamming

2021-04-10 10:52:04 +02:00

binder_alloc.h

binder: tell userspace to dump current backtrace when detected oneway spamming

2021-04-10 10:52:04 +02:00

binder_internal.h

binder: use euid from cred instead of using task