Messages in this thread Patch in this message | | | From | Mimi Zohar <> | Subject | [PATCH 6/6] integrity: replace task uid with cred uid | Date | Tue, 2 Dec 2008 16:48:00 -0500 |
| |
This patch addresses the credential merge changes in the security-testing-2.6/next tree.
Signed-off-by: Mimi Zohar <zohar@us.ibm.com> --- diff --git a/security/integrity/ima/ima_main.c b/security/integrity/ima/ima_main.c index 8672f86..4b74197 100644 --- a/security/integrity/ima/ima_main.c +++ b/security/integrity/ima/ima_main.c @@ -135,7 +135,7 @@ static int ima_path_check_integrity(struct path *path, int mask) struct vfsmount *mnt = mntget(path->mnt); struct file *file; - file = dentry_open(de, mnt, O_RDONLY); + file = dentry_open(de, mnt, O_RDONLY, current->cred); if (IS_ERR(file)) { ima_info("%s dentry_open failed\n", de->d_name.name); diff --git a/security/integrity/ima/ima_policy.c b/security/integrity/ima/ima_policy.c index c887379..f803d1a 100644 --- a/security/integrity/ima/ima_policy.c +++ b/security/integrity/ima/ima_policy.c @@ -92,7 +92,7 @@ static bool ima_match_rules(struct ima_measure_rule_entry *rule, if ((rule->flags & IMA_FSMAGIC) && rule->fsmagic != inode->i_sb->s_magic) return false; - if ((rule->flags & IMA_UID) && rule->uid != tsk->uid) + if ((rule->flags & IMA_UID) && rule->uid != tsk->cred->uid) return false; for (i = 0; i < MAX_LSM_RULES; i++) { int rc; diff --git a/security/integrity/integrity_audit.c b/security/integrity/integrity_audit.c index 29518a6..142ba8b 100644 --- a/security/integrity/integrity_audit.c +++ b/security/integrity/integrity_audit.c @@ -48,7 +48,7 @@ void integrity_audit_msg(int audit_msgno, struct inode *inode, ab = audit_log_start(current->audit_context, GFP_KERNEL, audit_msgno); audit_log_format(ab, "integrity: pid=%d uid=%u auid=%u", - current->pid, current->uid, + current->pid, current->cred->uid, audit_get_loginuid(current)); audit_log_task_context(ab); switch (audit_msgno) { -- 1.5.6.5
| |