Tahera Fahimi 54a6e6bbf3 landlock: Add signal scoping ... Currently, a sandbox process is not restricted to sending a signal (e.g. SIGKILL) to a process outside the sandbox environment. The ability to send a signal for a sandboxed process should be scoped the same way abstract UNIX sockets are scoped. Therefore, we extend the "scoped" field in a ruleset with LANDLOCK_SCOPE_SIGNAL to specify that a ruleset will deny sending any signal from within a sandbox process to its parent (i.e. any parent sandbox or non-sandboxed processes). This patch adds file_set_fowner and file_free_security hooks to set and release a pointer to the file owner's domain. This pointer, fown_domain in landlock_file_security will be used in file_send_sigiotask to check if the process can send a signal. The ruleset_with_unknown_scope test is updated to support LANDLOCK_SCOPE_SIGNAL. This depends on two new changes: - commit 1934b21261 ("file: reclaim 24 bytes from f_owner"): replace container_of(fown, struct file, f_owner) with fown->file . - commit 26f204380a ("fs: Fix file_set_fowner LSM hook inconsistencies"): lock before calling the hook. Signed-off-by: Tahera Fahimi <fahimitahera@gmail.com> Closes: https://github.com/landlock-lsm/linux/issues/8 Link: https://lore.kernel.org/r/df2b4f880a2ed3042992689a793ea0951f6798a5.1725657727.git.fahimitahera@gmail.com [mic: Update landlock_get_current_domain()'s return type, improve and fix locking in hook_file_set_fowner(), simplify and fix sleepable call and locking issue in hook_file_send_sigiotask() and rebase on the latest VFS tree, simplify hook_task_kill() and quickly return when not sandboxed, improve comments, rename LANDLOCK_SCOPED_SIGNAL] Co-developed-by: Mickaël Salaün <mic@digikod.net> Signed-off-by: Mickaël Salaün <mic@digikod.net>		2024-09-16 23:50:52 +02:00
..
asm-generic	net: add SO_DEVMEM_DONTNEED setsockopt to release RX frags	2024-09-11 20:44:32 -07:00
drm	A zpos normalization fix for komeda, a register bitmask fix for nouveau,	2024-09-06 11:25:46 +10:00
linux	landlock: Add signal scoping	2024-09-16 23:50:52 +02:00
misc	Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"	2024-08-15 16:59:14 +02:00
mtd
rdma	RDMA/core: Introduce "name_assign_type" for an IB device	2024-07-04 07:59:53 +03:00
regulator
scsi	scsi: mpi3mr: Add ioctl support for HDB	2024-06-26 23:30:09 -04:00
sound	ASoC: SOF: ipc: replace "enum sof_comp_type" field with "uint32_t"	2024-08-26 19:29:39 +01:00
video
xen	xen/gntalloc: Replace UAPI 1-element array	2024-02-13 09:06:48 +01:00
Kbuild