lkml.org 
[lkml]   [2013]   [May]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH 1/3] evm: calculate HMAC after initializing posix acl
On Wed, 24 Apr 2013, Mimi Zohar wrote:
> (Reposting with expanded 'cc' list.)
>
> Included in the EVM hmac calculation is the i_mode. Any changes to
> the i_mode need to be reflected in the hmac. shmem_mknod() currently
> calls posix_acl_init(), which modifies the i_mode, after calling

generic_acl_init()

> security_inode_init_security(). This patch reverses the order in
> which they are called.
>
> Reported-by: Sven Vermeulen <sven.vermeulen@siphos.be>
> Signed-off-by: Mimi Zohar <zohar@us.ibm.com>

Acked-by: Hugh Dickins <hughd@google.com>

> ---
> mm/shmem.c | 16 ++++++++--------
> 1 file changed, 8 insertions(+), 8 deletions(-)
>
> diff --git a/mm/shmem.c b/mm/shmem.c
> index 1c44af7..398c195 100644
> --- a/mm/shmem.c
> +++ b/mm/shmem.c
> @@ -1937,6 +1937,13 @@ shmem_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev)
>
> inode = shmem_get_inode(dir->i_sb, dir, mode, dev, VM_NORESERVE);
> if (inode) {
> +#ifdef CONFIG_TMPFS_POSIX_ACL
> + error = generic_acl_init(inode, dir);
> + if (error) {
> + iput(inode);
> + return error;
> + }
> +#endif
> error = security_inode_init_security(inode, dir,
> &dentry->d_name,
> shmem_initxattrs, NULL);
> @@ -1946,15 +1953,8 @@ shmem_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev)
> return error;
> }
> }
> -#ifdef CONFIG_TMPFS_POSIX_ACL
> - error = generic_acl_init(inode, dir);
> - if (error) {
> - iput(inode);
> - return error;
> - }
> -#else
> +
> error = 0;
> -#endif
> dir->i_size += BOGO_DIRENT_SIZE;
> dir->i_ctime = dir->i_mtime = CURRENT_TIME;
> d_instantiate(dentry, inode);
> --
> 1.8.1.rc3


\
 
 \ /
  Last update: 2013-05-14 05:21    [W:2.038 / U:0.464 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site