linux-kernel - [GIT PULL] Audit fixes for v4.8

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CAGH-Kguvbak4m=BaYUSKuSLcM_tYKkiX77LK2APdRo_tt9vOow@mail.gmail.com>
Date:   Thu, 1 Sep 2016 14:40:07 -0400
From:   Paul Moore <pmoore@...hat.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-audit@...hat.com, linux-kernel@...r.kernel.org
Subject: [GIT PULL] Audit fixes for v4.8

Hi Linus,

Two small patches to fix some bugs with the audit-by-executable
functionality we introduced back in v4.3 (both patches are marked for
the stable folks).  Please consider these fixes for v4.8.

Thanks,
-Paul

---
The following changes since commit 43761473c254b45883a64441dd0bc85a42f3645c:

  audit: fix a double fetch in audit_log_single_execve_arg()
(2016-07-20 14:15:46 -0400)

are available in the git repository at:

  git://git.infradead.org/users/pcmoore/audit stable-4.8

for you to fetch changes up to 5efc244346f9f338765da3d592f7947b0afdc4b5:

  audit: fix exe_file access in audit_exe_compare (2016-08-31 16:16:35 -0400)

----------------------------------------------------------------
Mateusz Guzik (2):
      mm: introduce get_task_exe_file
      audit: fix exe_file access in audit_exe_compare

 fs/proc/base.c       |  7 +------
 include/linux/mm.h   |  1 +
 kernel/audit_watch.c |  8 +++++---
 kernel/fork.c        | 23 +++++++++++++++++++++++
 4 files changed, 30 insertions(+), 9 deletions(-)

-- 
paul moore
security @ redhat