Stephen Smalley 98aa00345d selinux: fix regression introduced by move_mount(2) syscall ... commit 2db154b3ea ("vfs: syscall: Add move_mount(2) to move mounts around") introduced a new move_mount(2) system call and a corresponding new LSM security_move_mount hook but did not implement this hook for any existing LSM. This creates a regression for SELinux with respect to consistent checking of mounts; the existing selinux_mount hook checks mounton permission to the mount point path. Provide a SELinux hook implementation for move_mount that applies this same check for consistency. In the future we may wish to add a new move_mount filesystem permission and check as well, but this addresses the immediate regression. Fixes: 2db154b3ea ("vfs: syscall: Add move_mount(2) to move mounts around") Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Reviewed-by: Ondrej Mosnacek <omosnace@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com>		2020-01-20 07:42:37 -05:00
..
apparmor	+ Features	2019-12-03 12:51:35 -08:00
integrity	x86/efi: remove unused variables	2019-11-29 22:23:46 +11:00
keys	KEYS: trusted: Remove set but not used variable 'keyhndl'	2019-11-12 21:45:37 +02:00
loadpin	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
lockdown	security,lockdown,selinux: implement SELinux lockdown	2019-12-09 17:53:58 -05:00
safesetid	security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()	2019-10-30 08:45:57 -07:00
selinux	selinux: fix regression introduced by move_mount(2) syscall	2020-01-20 07:42:37 -05:00
smack	pipe: Reduce #inclusion of pipe_fs_i.h	2019-10-23 17:02:34 +01:00
tomoyo	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
yama	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
commoncap.c	Merge branch 'next-lsm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2019-07-09 12:24:21 -07:00
device_cgroup.c	device_cgroup: Export devcgroup_check_permission	2019-10-07 15:11:38 -05:00
inode.c	Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-07-19 10:42:02 -07:00
Kconfig	Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2019-09-28 08:14:15 -07:00
Kconfig.hardening	meminit fix	2019-07-28 12:33:15 -07:00
lsm_audit.c	security,lockdown,selinux: implement SELinux lockdown	2019-12-09 17:53:58 -05:00
Makefile	security: only build lsm_audit if CONFIG_SECURITY=y	2019-12-10 13:51:42 -05:00
min_addr.c
security.c	security,lockdown,selinux: implement SELinux lockdown	2019-12-09 17:53:58 -05:00