linux-kernel - Re: [PATCH] audit: treat s

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1326061596.19953.7.camel@falcor>
Date:	Sun, 08 Jan 2012 17:26:35 -0500
From:	Mimi Zohar <zohar@...ux.vnet.ibm.com>
To:	Kees Cook <keescook@...omium.org>
Cc:	James Morris <jmorris@...ei.org>,
	Andrew Morton <akpm@...ux-foundation.org>,
	Mimi Zohar <zohar@...ibm.com>,
	linux-security-module@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH] audit: treat s_id as an untrusted string

On Sat, 2012-01-07 at 10:41 -0800, Kees Cook wrote:
> The use of s_id should go through the untrusted string path, just to be
> extra careful.
> 
> Signed-off-by: Kees Cook <keescook@...omium.org>

Acked-by: Mimi Zohar <zohar@...ibm.com>

thanks,
Mimi

> ---
> applies on top of http://lkml.org/lkml/2012/1/6/308
> ---
>  security/integrity/ima/ima_audit.c |    8 +++++---
>  security/lsm_audit.c               |   23 +++++++++++++----------
>  2 files changed, 18 insertions(+), 13 deletions(-)
> 
> diff --git a/security/integrity/ima/ima_audit.c b/security/integrity/ima/ima_audit.c
> index c5c5a72..2ad942f 100644
> --- a/security/integrity/ima/ima_audit.c
> +++ b/security/integrity/ima/ima_audit.c
> @@ -56,9 +56,11 @@ void integrity_audit_msg(int audit_msgno, struct inode *inode,
>  		audit_log_format(ab, " name=");
>  		audit_log_untrustedstring(ab, fname);
>  	}
> -	if (inode)
> -		audit_log_format(ab, " dev=%s ino=%lu",
> -				 inode->i_sb->s_id, inode->i_ino);
> +	if (inode) {
> +		audit_log_format(ab, " dev=");
> +		audit_log_untrustedstring(ab, inode->i_sb->s_id);
> +		audit_log_format(ab, " ino=%lu", inode->i_ino);
> +	}
>  	audit_log_format(ab, " res=%d", !result ? 0 : 1);
>  	audit_log_end(ab);
>  }
> diff --git a/security/lsm_audit.c b/security/lsm_audit.c
> index 5f3b532..293b8c4 100644
> --- a/security/lsm_audit.c
> +++ b/security/lsm_audit.c
> @@ -235,10 +235,11 @@ static void dump_common_audit_data(struct audit_buffer *ab,
>  		audit_log_d_path(ab, " path=", &a->u.path);
> 
>  		inode = a->u.path.dentry->d_inode;
> -		if (inode)
> -			audit_log_format(ab, " dev=%s ino=%lu",
> -					inode->i_sb->s_id,
> -					inode->i_ino);
> +		if (inode) {
> +			audit_log_format(ab, " dev=");
> +			audit_log_untrustedstring(ab, inode->i_sb->s_id);
> +			audit_log_format(ab, " ino=%lu", inode->i_ino);
> +		}
>  		break;
>  	}
>  	case LSM_AUDIT_DATA_DENTRY: {
> @@ -248,10 +249,11 @@ static void dump_common_audit_data(struct audit_buffer *ab,
>  		audit_log_untrustedstring(ab, a->u.dentry->d_name.name);
> 
>  		inode = a->u.dentry->d_inode;
> -		if (inode)
> -			audit_log_format(ab, " dev=%s ino=%lu",
> -					inode->i_sb->s_id,
> -					inode->i_ino);
> +		if (inode) {
> +			audit_log_format(ab, " dev=");
> +			audit_log_untrustedstring(ab, inode->i_sb->s_id);
> +			audit_log_format(ab, " ino=%lu", inode->i_ino);
> +		}
>  		break;
>  	}
>  	case LSM_AUDIT_DATA_INODE: {
> @@ -266,8 +268,9 @@ static void dump_common_audit_data(struct audit_buffer *ab,
>  					 dentry->d_name.name);
>  			dput(dentry);
>  		}
> -		audit_log_format(ab, " dev=%s ino=%lu", inode->i_sb->s_id,
> -				 inode->i_ino);
> +		audit_log_format(ab, " dev=");
> +		audit_log_untrustedstring(ab, inode->i_sb->s_id);
> +		audit_log_format(ab, " ino=%lu", inode->i_ino);
>  		break;
>  	}
>  	case LSM_AUDIT_DATA_TASK:
> -- 
> 1.7.4.1
> 
> 


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/