rubenslte/android_kernel_samsung_msm8226-rubenslte
1
Fork 0
forked from rubenslte/android_kernel_samsung_msm8226
Code Pull Requests Activity
Files
fec70e69fe9b76fbf7c99ee2c108d548433df13d
android_kernel_samsung_msm8…/kernel
T
History
Kees Cook fec70e69fe CHROMIUM: security: introduce kernel_module_from_file hook 
Now that kernel module origins can be reasoned about, provide a hook to
the LSMs to make policy decisions about the module file.

Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: Serge E. Hallyn <serge.hallyn@canonical.com>
Acked-by: Eric Paris <eparis@redhat.com>

[accepted into Rusty's modules-wip tree for linux-next:
 http://git.kernel.org/?p=linux/kernel/git/rusty/linux.git;a=shortlog;h=refs/heads/modules-wip]
BUG=chromium-os:34134
TEST=parrot build, manual testing

Change-Id: I97f5cc0a0f3c1c04e1dc886d6d20f5a6d82326ac
Reviewed-on: https://gerrit.chromium.org/gerrit/34303
Tested-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Olof Johansson <olofj@chromium.org>
Commit-Ready: Kees Cook <keescook@chromium.org>
2020-12-10 21:34:01 +01:00
..
debug
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
events
perf/hwbp: Simplify the perf-hwbp code, fix documentation
2020-03-07 14:01:44 +01:00
gcov
…
irq
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
power
power: reduce timeout for stopping processes
2019-10-18 22:26:40 +02:00
sched
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
time
alarmtimer: Prevent overflow for relative nanosleep
2019-08-09 12:03:09 +02:00
trace
UPSTREAM: ring-buffer: Prevent overflow of size in ring_buffer_resize()
2019-08-06 12:24:25 +02:00
.gitignore
…
acct.c
…
async.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
audit_tree.c
VFS: Make clone_mnt()/copy_tree()/collect_mounts() return errors
2019-08-06 10:44:11 +02:00
audit_watch.c
get rid of kern_path_parent()
2019-08-06 10:44:16 +02:00
audit.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
audit.h
…
auditfilter.c
…
auditsc.c
seccomp: remove duplicated failure logging
2019-08-05 14:22:29 +02:00
backtracetest.c
…
bounds.c
…
capability.c
…
cgroup_freezer.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
cgroup.c
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
compat.c
compat: Fix RT signal mask corruption via sigprocmask
2012-05-10 08:58:33 -07:00
configs.c
…
cpu_pm.c
…
cpu.c
CPU hotplug: Provide lockless versions of callback registration functions
2019-08-05 14:22:43 +02:00
cpuset.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
crash_dump.c
…
cred.c
cred: copy_process() should clear child->replacement_session_keyring
2012-04-11 08:20:11 -07:00
delayacct.c
…
dma.c
Remove all #inclusions of asm/system.h
2012-03-28 18:30:03 +01:00
elfcore.c
…
exec_domain.c
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
exit.c
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
extable.c
…
fork.c
mm: Rename CGROUP_MEM_RES_CTLR to MEMCG
2020-09-23 18:05:05 +02:00
freezer.c
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
futex_compat.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
futex.c
futex: Remove unnecessary warning from get_futex_key
2019-08-08 16:37:20 +02:00
groups.c
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
hrtimer.c
time: Remove CONFIG_TIMER_STATS
2019-08-06 12:26:30 +02:00
hung_task.c
…
irq_work.c
irq_work: fix compile failure on tile from missing include
2012-04-13 13:15:16 -04:00
itimer.c
itimer: Use printk_once instead of WARN_ONCE
2012-04-10 11:00:30 +02:00
jump_label.c
…
kallsyms.c
vsprintf: Fix %ps on non symbols when using kallsyms
2012-04-23 14:29:54 -07:00
Kconfig.freezer
…
Kconfig.hz
…
Kconfig.locks
locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage
2012-03-23 13:18:57 +01:00
Kconfig.preempt
locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage
2012-03-23 13:18:57 +01:00
kexec.c
Merge branch 'akpm' (Andrew's patch-bomb)
2012-03-28 17:19:28 -07:00
kfifo.c
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
kmod.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
kprobes.c
Merge branch 'Linux 3.0.21' into msm-3.0
2012-03-30 00:09:34 -07:00
ksysfs.c
rcu: Add a module parameter to force use of expedited RCU primitives
2014-05-05 15:49:18 -07:00
kthread.c
…
latencytop.c
…
lglock.c
brlocks/lglocks: turn into functions
2019-08-06 10:41:58 +02:00
lockdep_internals.h
…
lockdep_proc.c
…
lockdep_states.h
…
lockdep.c
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
Makefile
brlocks/lglocks: turn into functions
2019-08-06 10:41:58 +02:00
module.c
CHROMIUM: security: introduce kernel_module_from_file hook
2020-12-10 21:34:01 +01:00
mutex-debug.c
…
mutex-debug.h
…
mutex.c
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
mutex.h
…
notifier.c
…
nsproxy.c
userns: Allow unprivileged users to create new namespaces
2020-09-23 18:05:05 +02:00
padata.c
padata: Fix cpu hotplug
2012-03-29 19:52:46 +08:00
panic.c
misc: Allow kernel to be compiled with SEC_DEBUG disabled
2019-08-09 09:59:25 +02:00
params.c
params: <level>_initcall-like kernel parameters
2012-03-26 12:50:51 +10:30
pid_namespace.c
proc: Usable inode numbers for the namespace file descriptors.
2015-09-11 14:44:24 +05:30
pid.c
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
posix-cpu-timers.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
posix-timers.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
printk.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
profile.c
…
ptrace.c
__ptrace_may_access() should not deny sub-threads
2019-08-06 08:48:40 +02:00
range.c
…
rcu.h
rcu: Add a module parameter to force use of expedited RCU primitives
2014-05-05 15:49:18 -07:00
rcupdate.c
rcu: Make exit_rcu() more precise and consolidate
2014-07-21 21:31:55 +05:30
rcutiny_plugin.h
rcu: Make exit_rcu() more precise and consolidate
2014-07-21 21:31:55 +05:30
rcutiny.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
rcutorture.c
…
rcutree_plugin.h
Revert "rcu: Move PREEMPT_RCU preemption to switch_to() invocation"
2014-07-21 21:46:54 +05:30
rcutree_trace.c
rcu: Make rcu_barrier() less disruptive
2014-07-21 21:37:29 +05:30
rcutree.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
rcutree.h
Revert "rcu: Move PREEMPT_RCU preemption to switch_to() invocation"
2014-07-21 21:46:54 +05:30
relay.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
res_counter.c
…
resource.c
/proc/iomem: only expose physical resource addresses to privileged users
2019-08-09 11:48:51 +02:00
rtmutex_common.h
…
rtmutex-debug.c
…
rtmutex-debug.h
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
rtmutex-tester.c
…
rtmutex.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
rtmutex.h
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
rwsem.c
Remove all #inclusions of asm/system.h
2012-03-28 18:30:03 +01:00
seccomp.c
seccomp: Replace BUG(!spin_is_locked()) with assert_spin_lock
2019-08-05 14:22:42 +02:00
semaphore.c
…
signal.c
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
smp.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
softirq.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
spinlock.c
locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage
2012-03-23 13:18:57 +01:00
srcu.c
…
stacktrace.c
…
stop_machine.c
Drop whitespace, Kconfigs, Makefile noise and dead code
2013-03-14 09:32:58 -07:00
sys_ni.c
CHROMIUM: module: add syscall to load module from fd
2020-12-10 21:34:01 +01:00
sys.c
userns: Add kuid_t and kgid_t and associated infrastructure in uidgid.h
2019-08-08 15:08:48 +02:00
sysctl_binary.c
kernel/sysctl_binary.c: check name array length in deprecated_sysctl_warning()
2019-08-08 12:09:29 +02:00
sysctl.c
kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
2020-05-20 09:43:44 +02:00
taskstats.c
…
test_kprobes.c
…
time.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
timeconst.bc
kernel: Replace timeconst.pl with a bc script
2019-08-05 09:09:45 +02:00
timeconst.pl
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
timer.c
time: Remove CONFIG_TIMER_STATS
2019-08-06 12:26:30 +02:00
tracepoint.c
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
tsacct.c
…
uid16.c
…
up.c
…
user_namespace.c
proc: fix build broken by proc inode per namespace patch
2019-08-05 09:13:23 +02:00
user-return-notifier.c
…
user.c
proc: Usable inode numbers for the namespace file descriptors.
2015-09-11 14:44:24 +05:30
utsname_sysctl.c
…
utsname.c
userns: Allow unprivileged use of setns.
2020-09-23 18:05:05 +02:00
wait.c
…
watchdog.c
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
workqueue_sched.h
…
workqueue.c
time: Remove CONFIG_TIMER_STATS
2019-08-06 12:26:30 +02:00