1. 18 Jun, 2019 1 commit
    • Sven Van Asbroeck's avatar
      firmware: improve LSM/IMA security behaviour · 2472d64a
      Sven Van Asbroeck authored
      The firmware loader queries if LSM/IMA permits it to load firmware
      via the sysfs fallback. Unfortunately, the code does the opposite:
      it expressly permits sysfs fw loading if security_kernel_load_data(
      LOADING_FIRMWARE) returns -EACCES. This happens because a
      zero-on-success return value is cast to a bool that's true on success.
      
      Fix the return value handling so we get the correct behaviour.
      
      Fixes: 6e852651 ("firmware: add call to LSM hook before firmware sysfs fallback")
      Cc: Stable <stable@vger.kernel.org>
      Cc: Mimi Zohar <zohar@linux.vnet.ibm.com>
      Cc: Kees Cook <keescook@chromium.org>
      To: Luis Chamberlain <mcgrof@kernel.org>
      Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
      Cc: "Rafael J. Wysocki" <rafael@kernel.org>
      Cc: linux-kernel@vger.kernel.org
      Signed-off-by: default avatarSven Van Asbroeck <TheSven73@gmail.com>
      Reviewed-by: default avatarMimi Zohar <zohar@linux.ibm.com>
      Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
      2472d64a
  2. 17 Jun, 2019 1 commit
  3. 15 Jun, 2019 2 commits
  4. 14 Jun, 2019 4 commits
  5. 13 Jun, 2019 4 commits
  6. 12 Jun, 2019 3 commits
  7. 10 Jun, 2019 3 commits
  8. 05 Jun, 2019 1 commit
  9. 03 Jun, 2019 21 commits