lkml.org 
[lkml]   [2014]   [Oct]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subject[PATCH v3 0/3] integrity: NULL pointer dereference fixes
Date
Hi,

Recently Jan Kara reported about possible NULL pointer dereference
in IMA and EVM setxattr hooks. This patchset fixes the problem.

http://sourceforge.net/p/linux-ima/mailman/message/32957578

In this version of the patchset we agreed with Mimi to split IMA
patch into two, where the first patch fixes the oops and must go to
the stable and the second patch limits setting of file hash to fix
and log modes and may go to the next kernel version via normal process.

- Dmitry

Dmitry Kasatkin (3):
ima: check xattr value length and type in the ima_inode_setxattr()
ima: limit file hash setting by user to fix and log modes
evm: check xattr value length and type in evm_inode_setxattr()

security/integrity/evm/evm_main.c | 11 ++++++++---
security/integrity/ima/ima_appraise.c | 10 ++++++++--
security/integrity/integrity.h | 1 +
3 files changed, 17 insertions(+), 5 deletions(-)

--
1.9.1



\
 
 \ /
  Last update: 2014-10-28 13:01    [W:0.044 / U:0.208 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site