This is a note to let you know that I've just added the patch titled
perf/core: Call LSM hook after copying perf_event_attr
to the 5.10-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
perf-core-call-lsm-hook-after-copying-perf_event_attr.patch
and it can be found in the queue-5.10 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 0a041ebca4956292cadfb14a63ace3a9c1dcb0a3 Mon Sep 17 00:00:00 2001
From: Namhyung Kim <namhyung@xxxxxxxxxx>
Date: Tue, 20 Dec 2022 14:31:40 -0800
Subject: perf/core: Call LSM hook after copying perf_event_attr
From: Namhyung Kim <namhyung@xxxxxxxxxx>
commit 0a041ebca4956292cadfb14a63ace3a9c1dcb0a3 upstream.
It passes the attr struct to the security_perf_event_open() but it's
not initialized yet.
Fixes: da97e18458fb ("perf_event: Add support for LSM and SELinux checks")
Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
Reviewed-by: Joel Fernandes (Google) <joel@xxxxxxxxxxxxxxxxx>
Cc: stable@xxxxxxxxxxxxxxx
Link: https://lkml.kernel.org/r/20221220223140.4020470-1-namhyung@xxxxxxxxxx
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
kernel/events/core.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
--- a/kernel/events/core.c
+++ b/kernel/events/core.c
@@ -11781,12 +11781,12 @@ SYSCALL_DEFINE5(perf_event_open,
if (flags & ~PERF_FLAG_ALL)
return -EINVAL;
- /* Do we allow access to perf_event_open(2) ? */
- err = security_perf_event_open(&attr, PERF_SECURITY_OPEN);
+ err = perf_copy_attr(attr_uptr, &attr);
if (err)
return err;
- err = perf_copy_attr(attr_uptr, &attr);
+ /* Do we allow access to perf_event_open(2) ? */
+ err = security_perf_event_open(&attr, PERF_SECURITY_OPEN);
if (err)
return err;
Patches currently in stable-queue which might be from namhyung@xxxxxxxxxx are
queue-5.10/perf-trace-use-macro-raw_syscall_args_num-to-replace.patch
queue-5.10/perf-debug-set-debug_peo_args-and-redirect_to_stderr.patch
queue-5.10/perf-core-call-lsm-hook-after-copying-perf_event_attr.patch
queue-5.10/perf-trace-handle-failure-when-trace-point-folder-is.patch
queue-5.10/perf-symbol-correction-while-adjusting-symbol.patch
queue-5.10/perf-trace-return-error-if-a-system-call-doesn-t-exi.patch
