Wang Weiyang 697e55b941 device_cgroup: Roll back to original exceptions after copy failure ... commit e68bfbd3b3c3a0ec3cf8c230996ad8cabe90322f upstream. When add the 'a *:* rwm' entry to devcgroup A's whitelist, at first A's exceptions will be cleaned and A's behavior is changed to DEVCG_DEFAULT_ALLOW. Then parent's exceptions will be copyed to A's whitelist. If copy failure occurs, just return leaving A to grant permissions to all devices. And A may grant more permissions than parent. Backup A's whitelist and recover original exceptions after copy failure. Cc: stable@vger.kernel.org Fixes: 4cef7299b4 ("device_cgroup: add proper checking when changing default behavior") Signed-off-by: Wang Weiyang <wangweiyang2@huawei.com> Reviewed-by: Aristeu Rozanski <aris@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-01-18 11:30:44 +01:00
..
apparmor	apparmor: Fix abi check to include v8 abi	2023-01-18 11:30:21 +01:00
integrity	ima: Fix a potential NULL pointer access in ima_restore_measurement_list	2023-01-18 11:30:43 +01:00
keys	KEYS: trusted: Fix migratable=1 failing	2021-03-04 09:39:53 +01:00
loadpin
selinux	selinux: Add boundary check in put_entry()	2022-08-25 11:15:00 +02:00
smack	Fix incorrect type in assignment of ipv6 port for audit	2022-04-15 14:14:54 +02:00
tomoyo	TOMOYO: fix __setup handlers return values	2022-04-15 14:14:48 +02:00
yama
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 17:46:55 +01:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-18 11:30:44 +01:00
inode.c
Kconfig	fortify: Explicitly disable Clang support	2021-11-26 11:36:18 +01:00
lsm_audit.c	dump_common_audit_data(): fix racy accesses to ->d_name	2021-01-19 18:22:37 +01:00
Makefile
min_addr.c
security.c	binder: use cred instead of task for selinux checks	2021-11-26 11:35:56 +01:00