Chenbo Feng f66e448cfd selinux: bpf: Add addtional check for bpf object file receive ... Introduce a bpf object related check when sending and receiving files through unix domain socket as well as binder. It checks if the receiving process have privilege to read/write the bpf map or use the bpf program. This check is necessary because the bpf maps and programs are using a anonymous inode as their shared inode so the normal way of checking the files and sockets when passing between processes cannot work properly on eBPF object. This check only works when the BPF_SYSCALL is configured. Signed-off-by: Chenbo Feng <fengc@google.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Reviewed-by: James Morris <james.l.morris@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-10-20 13:32:59 +01:00
..
bpf	selinux: bpf: Add addtional check for bpf object file receive	2017-10-20 13:32:59 +01:00
cgroup	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-10-05 18:19:22 -07:00
configs	ANDROID: binder: add hwbinder,vndbinder to BINDER_DEVICES.	2017-08-22 18:43:23 -07:00
debug
events	bpf: perf event change needed for subsequent bpf helpers	2017-10-07 23:05:57 +01:00
gcov
irq	irq/generic-chip: Don't replace domain's name	2017-09-28 12:18:59 +02:00
livepatch
locking	locking/rwsem-xadd: Fix missed wakeup due to reordering of load	2017-09-29 10:10:20 +02:00
power	PM / s2idle: Invoke the ->wake() platform callback earlier	2017-09-29 01:26:13 +02:00
printk	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk	2017-09-07 21:00:52 -07:00
rcu	Two updates.	2017-10-04 08:34:01 -07:00
sched	sched/debug: Ignore TASK_IDLE for SysRq-W	2017-09-29 11:02:57 +02:00
time	drivers/pps: aesthetic tweaks to PPS-related content	2017-09-08 18:26:51 -07:00
trace	bpf: split verifier and program ops	2017-10-18 14:17:10 +01:00
.gitignore
acct.c	fs: make the buf argument to __kernel_write a void pointer	2017-09-04 19:05:15 -04:00
async.c
audit_fsnotify.c
audit_tree.c
audit_watch.c	audit/stable-4.13 PR 20170816	2017-08-16 16:48:34 -07:00
audit.c	audit: update the function comments	2017-09-05 09:46:59 -04:00
audit.h	ipc: mqueue: Replace timespec with timespec64	2017-09-03 20:21:24 -04:00
auditfilter.c
auditsc.c	Merge branch 'work.ipc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-09-14 17:37:26 -07:00
backtracetest.c
bounds.c
capability.c
compat.c
configs.c
context_tracking.c
cpu_pm.c
cpu.c	Merge branch 'core-watchdog-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2017-10-06 08:36:41 -07:00
crash_core.c
crash_dump.c
cred.c
delayacct.c
dma.c
elfcore.c
exec_domain.c
exit.c	fix infoleak in waitid(2)	2017-09-29 13:43:15 -04:00
extable.c	extable: Enable RCU if it is not watching in kernel_text_address()	2017-09-23 16:50:20 -04:00
fork.c	android: binder: drop lru lock in isolate callback	2017-10-03 17:54:24 -07:00
freezer.c
futex_compat.c
futex.c	futex: Fix pi_state->owner serialization	2017-09-25 16:37:11 +02:00
groups.c
hung_task.c
irq_work.c
jump_label.c	jump_label: Provide hotplug context variants	2017-08-10 12:28:59 +02:00
kallsyms.c
kcmp.c	kernel/kcmp.c: drop branch leftover typo	2017-10-03 17:54:25 -07:00
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kcov.c	kcov: support compat processes	2017-09-08 18:26:51 -07:00
kexec_core.c
kexec_file.c
kexec_internal.h
kexec.c
kmod.c	kmod: move #ifdef CONFIG_MODULES wrapper to Makefile	2017-09-08 18:26:51 -07:00
kprobes.c
ksysfs.c
kthread.c	kernel/kthread.c: kthread_worker: don't hog the cpu	2017-08-31 16:33:15 -07:00
latencytop.c
Makefile	kmod: move #ifdef CONFIG_MODULES wrapper to Makefile	2017-09-08 18:26:51 -07:00
memremap.c	memremap: add scheduling point to devm_memremap_pages	2017-10-03 17:54:25 -07:00
module_signing.c
module-internal.h
module.c
notifier.c
nsproxy.c
padata.c
panic.c	locking/refcounts, x86/asm: Implement fast refcount overflow protection	2017-08-17 10:40:26 +02:00
params.c	kernel/params.c: improve STANDARD_PARAM_DEF readability	2017-10-03 17:54:26 -07:00
pid_namespace.c
pid.c	pids: make task_tgid_nr_ns() safe	2017-08-21 12:47:31 -07:00
profile.c
ptrace.c
range.c
reboot.c
relay.c
resource.c
seccomp.c	seccomp: fix the usage of get/put_seccomp_filter() in seccomp_get_filter()	2017-09-27 22:51:12 -07:00
signal.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2017-09-11 18:34:47 -07:00
smp.c	treewide: make "nr_cpu_ids" unsigned	2017-09-08 18:26:48 -07:00
smpboot.c	watchdog/core, powerpc: Lock cpus across reconfiguration	2017-10-04 10:53:54 +02:00
smpboot.h
softirq.c
stacktrace.c
stop_machine.c
sys_ni.c
sys.c
sysctl_binary.c	fs: fix kernel_write prototype	2017-09-04 19:05:15 -04:00
sysctl.c	Merge branch 'core-watchdog-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2017-10-06 08:36:41 -07:00
task_work.c
taskstats.c
test_kprobes.c
torture.c
tracepoint.c
tsacct.c
ucount.c
uid16.c
umh.c	kmod: split out umh code into its own file	2017-09-08 18:26:50 -07:00
up.c	smp: Avoid using two cache lines for struct call_single_data	2017-08-29 15:14:38 +02:00
user_namespace.c
user-return-notifier.c
user.c
utsname_sysctl.c
utsname.c
watchdog_hld.c	watchdog/hardlockup/perf: Fix spelling mistake: "permanetely" -> "permanently"	2017-09-28 12:24:54 +02:00
watchdog.c	watchdog/core: Put softlockup_threads_initialized under ifdef guard	2017-10-04 11:30:50 +02:00
workqueue_internal.h
workqueue.c	Merge branch 'for-4.14' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq	2017-09-06 21:59:31 -07:00