Tetsuo Handa 68e579316c tomoyo: fallback to realpath if symlink's pathname does not exist ... commit ada1986d07976d60bed5017aa38b7f7cf27883f7 upstream. Alfred Agrell found that TOMOYO cannot handle execveat(AT_EMPTY_PATH) inside chroot environment where /dev and /proc are not mounted, for commit 51f39a1f0c ("syscalls: implement execveat() system call") missed that TOMOYO tries to canonicalize argv[0] when the filename fed to the executed program as argv[0] is supplied using potentially nonexistent pathname. Since "/dev/fd/<fd>" already lost symlink information used for obtaining that <fd>, it is too late to reconstruct symlink's pathname. Although <filename> part of "/dev/fd/<fd>/<filename>" might not be canonicalized, TOMOYO cannot use tomoyo_realpath_nofollow() when /dev or /proc is not mounted. Therefore, fallback to tomoyo_realpath_from_path() when tomoyo_realpath_nofollow() failed. Reported-by: Alfred Agrell <blubban@gmail.com> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1082001 Fixes: 51f39a1f0c ("syscalls: implement execveat() system call") Cc: stable@vger.kernel.org # v3.19+ Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-10-17 15:08:24 +02:00
..
apparmor	apparmor: fix possible NULL pointer dereference	2024-09-12 11:06:40 +02:00
bpf
integrity	ima: Avoid blocking in RCU read-side critical section	2024-07-18 13:05:44 +02:00
keys	task_work: s/task_work_cancel()/task_work_cancel_func()/	2024-08-19 05:40:57 +02:00
loadpin	LoadPin: Ignore the "contents" argument of the LSM hooks	2023-01-14 10:16:22 +01:00
lockdown
safesetid	LSM: SafeSetID: Fix warnings reported by test bot	2020-10-13 09:17:36 -07:00
selinux	selinux,smack: don't bypass permissions check in inode_setsecctx hook	2024-10-17 15:07:59 +02:00
smack	selinux,smack: don't bypass permissions check in inode_setsecctx hook	2024-10-17 15:07:59 +02:00
tomoyo	tomoyo: fallback to realpath if symlink's pathname does not exist	2024-10-17 15:08:24 +02:00
yama	task_work: cleanup notification modes	2020-10-17 15:05:30 -06:00
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 18:14:26 +01:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-14 10:16:36 +01:00
inode.c
Kconfig	proc: add config & param to block forcing mem writes	2024-10-17 15:08:12 +02:00
Kconfig.hardening	hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero	2022-10-26 13:25:12 +02:00
lsm_audit.c	dump_common_audit_data(): fix racy accesses to ->d_name	2021-01-19 18:27:29 +01:00
Makefile
min_addr.c
security.c	ima: Avoid blocking in RCU read-side critical section	2024-07-18 13:05:44 +02:00