Roberto Sassu 0f2206e3d9 ima: Don't modify file descriptor mode on the fly ... commit 207cdd565dfc95a0a5185263a567817b7ebf5467 upstream. Commit a408e4a86b ("ima: open a new file instance if no read permissions") already introduced a second open to measure a file when the original file descriptor does not allow it. However, it didn't remove the existing method of changing the mode of the original file descriptor, which is still necessary if the current process does not have enough privileges to open a new one. Changing the mode isn't really an option, as the filesystem might need to do preliminary steps to make the read possible. Thus, this patch removes the code and keeps the second open as the only option to measure a file when it is unreadable with the original file descriptor. Cc: <stable@vger.kernel.org> # 4.20.x: 0014cc04e8 ima: Set file->f_mode Fixes: 2fe5d6def1 ("ima: integrity appraisal extension") Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-12-30 11:54:17 +01:00
..
apparmor
bpf
integrity	ima: Don't modify file descriptor mode on the fly	2020-12-30 11:54:17 +01:00
keys	task_work: cleanup notification modes	2020-10-17 15:05:30 -06:00
loadpin
lockdown
safesetid
selinux	selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling	2020-12-30 11:53:03 +01:00
smack	Smack: Handle io_uring kernel thread privileges	2020-12-30 11:54:02 +01:00
tomoyo
yama	task_work: cleanup notification modes	2020-10-17 15:05:30 -06:00
commoncap.c
device_cgroup.c
inode.c
Kconfig
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c