Kalesh Singh 1927e498ae procfs: prevent unprivileged processes accessing fdinfo dir ...

The file permissions on the fdinfo dir from were changed from
S_IRUSR|S_IXUSR to S_IRUGO|S_IXUGO, and a PTRACE_MODE_READ check was added
for opening the fdinfo files [1].  However, the ptrace permission check
was not added to the directory, allowing anyone to get the open FD numbers
by reading the fdinfo directory.

Add the missing ptrace permission check for opening the fdinfo directory.

[1] https://lkml.kernel.org/r/20210308170651.919148-1-kaleshsingh@google.com

Link: https://lkml.kernel.org/r/20210713162008.1056986-1-kaleshsingh@google.com
Fixes: 7bc3fa0172 ("procfs: allow reading fdinfo with PTRACE_MODE_READ")
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>
Cc: Kees Cook <keescook@chromium.org>
Cc: Eric W. Biederman <ebiederm@xmission.com>
Cc: Christian Brauner <christian.brauner@ubuntu.com>
Cc: Suren Baghdasaryan <surenb@google.com>
Cc: Hridya Valsaraju <hridya@google.com>
Cc: Jann Horn <jannh@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>

2022-05-09 17:34:28 -07:00

..

array.c

tracehook: Remove tracehook.h

2022-03-10 16:51:51 -06:00

base.c

Merge tag 'ptrace-cleanups-for-v5.18' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2022-03-28 17:29:53 -07:00

bootconfig.c

proc: bootconfig: Add null pointer check

2022-04-02 08:40:09 -04:00

cmdline.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

consoles.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 191

2019-05-30 11:29:21 -07:00

cpuinfo.c

proc/cpuinfo: switch to ->read_iter

2020-11-06 10:05:18 -08:00

devices.c

block: move block-related definitions out of fs.h

2020-06-24 09:16:02 -06:00

fd.c

procfs: prevent unprivileged processes accessing fdinfo dir

2022-05-09 17:34:28 -07:00

fd.h

fs: make helpers idmap mount aware

2021-01-24 14:27:20 +01:00

generic.c

fs: proc: store PDE()->data into inode->i_private

2022-01-22 08:33:37 +02:00

inode.c

fs: allocate inode by using alloc_inode_sb()

2022-03-22 15:57:03 -07:00

internal.h

fs: proc: store PDE()->data into inode->i_private

2022-01-22 08:33:37 +02:00

interrupts.c

proc: introduce proc_create_seq{,_data}

2018-05-16 07:23:35 +02:00

Kconfig

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

kcore.c

fs/proc/kcore: use page_offline_(freeze|thaw)

2021-06-30 20:47:28 -07:00

kmsg.c

proc: faster open/read/close with "permanent" files

2020-04-07 10:43:42 -07:00

loadavg.c

sched: Make nr_running() return 32-bit value

2021-05-12 21:34:14 +02:00

Makefile

proc: bootconfig: Add /proc/bootconfig to show boot config list

2020-01-13 13:19:39 -05:00

meminfo.c

mm: memcontrol: convert NR_FILE_PMDMAPPED account to pages

2021-02-24 13:38:29 -08:00

namespaces.c

Merge branch 'work.openat2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2020-01-29 11:20:24 -08:00

nommu.c

mm: don't include asm/pgtable.h if linux/mm.h is already included

2020-06-09 09:39:13 -07:00

page.c

mm: don't include <linux/memremap.h> in <linux/mm.h>

2022-03-03 12:47:33 -05:00

proc_net.c

proc: remove PDE_DATA() completely

2022-01-22 08:33:37 +02:00

proc_sysctl.c

kernel/sysctl.c: rename sysctl_init() to sysctl_init_bases()

2022-01-22 08:33:36 +02:00

proc_tty.c

tty: replace ->proc_fops with ->proc_show

2018-05-16 07:24:30 +02:00

root.c

fs: make helpers idmap mount aware

2021-01-24 14:27:20 +01:00

self.c

Revert "proc: don't allow async path resolution of /proc/self components"

2021-02-23 20:32:11 -07:00

softirqs.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

stat.c

fs/proc/uptime.c: Fix idle time reporting in /proc/uptime

2021-10-05 15:51:35 +02:00

task_mmu.c

proc: fix documentation and description of pagemap

2022-03-05 11:08:33 -08:00

task_nommu.c

mmap locking API: use coccinelle to convert mmap_sem rwsem call sites

2020-06-09 09:39:14 -07:00

thread_self.c

Revert "proc: don't allow async path resolution of /proc/thread-self components"

2021-02-23 20:32:11 -07:00

uptime.c

fs/proc/uptime.c: Fix idle time reporting in /proc/uptime

2021-10-05 15:51:35 +02:00

util.c

fs/proc/util.c: include fs/proc/internal.h for name_to_int()

2019-01-04 13:13:45 -08:00

version.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

vmcore.c

proc/vmcore: fix vmcore_alloc_buf() kernel-doc comment

2022-03-23 19:00:33 -07:00