Stephen Smalley 2d8fdc5744 selinux: fall back to ref-walk if audit is required ... commit 0188d5c025 upstream. commit bda0be7ad9 ("security: make inode_follow_link RCU-walk aware") passed down the rcu flag to the SELinux AVC, but failed to adjust the test in slow_avc_audit() to also return -ECHILD on LSM_AUDIT_DATA_DENTRY. Previously, we only returned -ECHILD if generating an audit record with LSM_AUDIT_DATA_INODE since this was only relevant from inode_permission. Move the handling of MAY_NOT_BLOCK to avc_audit() and its inlined equivalent in selinux_inode_permission() immediately after we determine that audit is required, and always fall back to ref-walk in this case. Fixes: bda0be7ad9 ("security: make inode_follow_link RCU-walk aware") Reported-by: Will Deacon <will@kernel.org> Suggested-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-02-14 16:34:20 -05:00
..
include	selinux: fall back to ref-walk if audit is required	2020-02-14 16:34:20 -05:00
ss	selinux/stable-5.4 PR 20191007	2019-10-08 10:51:37 -07:00
.gitignore	SELinux: add .gitignore files for dynamic classes	2009-10-24 09:42:27 +08:00
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
Makefile	SELinux: Remove unused selinux_is_enabled	2019-01-08 13:18:44 -08:00
avc.c	selinux: fall back to ref-walk if audit is required	2020-02-14 16:34:20 -05:00
hooks.c	selinux: fall back to ref-walk if audit is required	2020-02-14 16:34:20 -05:00
ibpkey.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295	2019-06-05 17:36:38 +02:00
netif.c	selinux/stable-5.4 PR 20190917	2019-09-23 11:21:04 -07:00
netlabel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
netlink.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
netnode.c	selinux/stable-5.4 PR 20190917	2019-09-23 11:21:04 -07:00
netport.c	selinux/stable-5.4 PR 20190917	2019-09-23 11:21:04 -07:00
nlmsgtab.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2019-06-22 08:59:24 -04:00
selinuxfs.c	Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-07-19 10:42:02 -07:00
xfrm.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00