The patch titled
slim: handle failure to register
has been added to the -mm tree. Its filename is
slim-main-patch-handle-failure-to-register.patch
See http://www.zip.com.au/~akpm/linux/patches/stuff/added-to-mm.txt to find
out what to do about this
------------------------------------------------------
Subject: slim: handle failure to register
From: Kylene Jo Hall <kjhall@xxxxxxxxxx>
Thanks to Stephen Smalley for pointing out that we need to securely handle
a failure to register with the LSM security hooks. This patch adds a panic
in the event that the module is unable to register.
Signed-off-by: Kylene Hall <kjhall@xxxxxxxxxx>
Signed-off-by: Mimi Zohar <zohar@xxxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxx>
---
security/slim/slm_main.c | 6 +++++-
1 files changed, 5 insertions(+), 1 deletion(-)
diff -puN security/slim/slm_main.c~slim-main-patch-handle-failure-to-register security/slim/slm_main.c
--- a/security/slim/slm_main.c~slim-main-patch-handle-failure-to-register
+++ a/security/slim/slm_main.c
@@ -1362,9 +1362,13 @@ int slim_enabled = 1;
#endif
static int __init init_slm(void)
{
+ int rc;
if (!slim_enabled)
return 0;
slm_task_init_alloc_security(current);
- return register_security(&slm_security_ops);
+ rc = register_security(&slm_security_ops);
+ if (rc != 0)
+ panic("SLIM: Unable to register with kernel\n");
+ return rc;
}
security_initcall(init_slm);
_
Patches currently in -mm which might be from kjhall@xxxxxxxxxx are
mprotect-patch-for-use-by-slim.patch
integrity-service-api-and-dummy-provider.patch
integrity-service-api-and-dummy-provider-cleanup-use-of-configh.patch
integrity-service-api-and-dummy-provider-compilation-warning-fix.patch
slim-main-patch.patch
slim-main-patch-socket_post_create-hook-return-code.patch
slim-main-patch-misc-cleanups-requested-at-inclusion-time.patch
slim-main-patch-handle-failure-to-register.patch
slim-secfs-patch.patch
slim-make-and-config-stuff.patch
slim-make-and-config-stuff-makefile-fix.patch
slim-debug-output.patch
slim-fix-security-issue-with-the-task_post_setuid-hook.patch
slim-secfs-inode-i_private-build-fix.patch
slim-documentation.patch
-
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
