Ben Hutchings fa20cb40aa module: Invalidate signatures on force-loaded modules ...

commit bca014caaa6130e57f69b5bf527967aa8ee70fdd upstream.

Signing a module should only make it trusted by the specific kernel it
was built for, not anything else.  Loading a signed module meant for a
kernel with a different ABI could have interesting effects.
Therefore, treat all signatures as invalid when a module is
force-loaded.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Willy Tarreau <w@1wt.eu>

2016-08-27 11:40:39 +02:00

..

cpu

sched, idle: Fix the idle polling state logic

2013-11-29 11:11:42 -08:00

debug

kdb: fix incorrect counts in KDB summary command output

2015-03-06 14:40:52 -08:00

events

ptrace: use fsuid, fsgid, effective creds for fs access checks

2016-02-25 11:57:47 -08:00

gcov

…

irq

genirq: Prevent chip buslock deadlock

2016-03-03 15:06:20 -08:00

power

PM / QoS: remove duplicate call to pm_qos_update_target

2015-03-18 13:22:28 +01:00

sched

sched/cputime: Fix steal time accounting vs. CPU hotplug

2016-06-07 10:42:48 +02:00

time

posix-clock: Fix return code on the poll method's error path

2016-03-03 15:06:23 -08:00

trace

tracing: Handle NULL formats in hold_module_trace_bprintk_format()

2016-08-27 11:40:24 +02:00

.gitignore

…

acct.c

…

async.c

…

audit_tree.c

audit: keep inode pinned

2014-11-21 09:22:52 -08:00

audit_watch.c

…

audit.c

CAPABILITIES: remove undefined caps from all processes

2014-09-17 09:03:57 -07:00

audit.h

audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record

2013-12-04 10:57:03 -08:00

auditfilter.c

…

auditsc.c

auditsc: audit_krule mask accesses need bounds checking

2014-06-16 13:42:53 -07:00

backtracetest.c

…

bounds.c

…

capability.c

CAPABILITIES: remove undefined caps from all processes

2014-09-17 09:03:57 -07:00

cgroup_freezer.c

…

cgroup.c

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

compat.c

…

configs.c

…

context_tracking.c

Merge branch 'sched-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2013-06-20 08:18:35 -10:00

cpu_pm.c

…

cpu.c

sched: Fix hotplug vs. set_cpus_allowed_ptr()

2014-06-11 12:03:24 -07:00

cpuset.c

cpuset,mempolicy: fix sleeping function called from invalid context

2014-07-17 15:58:00 -07:00

crash_dump.c

…

cred.c

…

delayacct.c

…

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

introduce for_each_thread() to replace the buggy while_each_thread()

2014-10-05 14:54:15 -07:00

extable.c

…

fork.c

unshare: Unsharing a thread does not require unsharing a vm

2015-10-01 12:07:28 +02:00

freezer.c

freezer: Do not freeze tasks killed by OOM killer

2014-11-14 08:47:58 -08:00

futex_compat.c

ptrace: use fsuid, fsgid, effective creds for fs access checks

2016-02-25 11:57:47 -08:00

futex.c

futex: Drop refcount if requeue_pi() acquired the rtmutex

2016-02-25 11:57:49 -08:00

groups.c

userns: Don't allow setgroups until a gid mapping has been setablished

2015-01-08 09:58:16 -08:00

hrtimer.c

hrtimer: Set expiry time before switch_hrtimer_base()

2014-06-07 13:25:31 -07:00

hung_task.c

…

irq_work.c

…

itimer.c

…

jump_label.c

…

kallsyms.c

…

kcmp.c

ptrace: use fsuid, fsgid, effective creds for fs access checks

2016-02-25 11:57:47 -08:00

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

locking/mutex: Disable optimistic spinning on some architectures

2014-07-28 08:00:07 -07:00

Kconfig.preempt

…

kexec.c

PCI: Disable Bus Master only on kexec reboot

2013-12-20 07:45:08 -08:00

kmod.c

…

kprobes.c

…

ksysfs.c

…

kthread.c

…

latencytop.c

…

lglock.c

…

lockdep_internals.h

…

lockdep_proc.c

…

lockdep_states.h

…

lockdep.c

…

Makefile

…

modsign_certificate.S

…

modsign_pubkey.c

…

module_signing.c

…

module-internal.h

…

module.c

module: Invalidate signatures on force-loaded modules

2016-08-27 11:40:39 +02:00

mutex-debug.c

…

mutex-debug.h

…

mutex.c

…

mutex.h

…

notifier.c

…

nsproxy.c

…

padata.c

…

panic.c

printk: do cond_resched() between lines while outputting to consoles

2016-08-21 23:22:37 +02:00

params.c

…

pid_namespace.c

pid_namespace: pidns_get() should check task_active_pid_ns() != NULL

2014-04-26 17:15:34 -07:00

pid.c

exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting

2015-01-08 09:58:17 -08:00

posix-cpu-timers.c

…

posix-timers.c

posix-timers: Fix stack info leak in timer_create()

2014-11-14 08:48:00 -08:00

printk.c

printk: do cond_resched() between lines while outputting to consoles

2016-08-21 23:22:37 +02:00

profile.c

…

ptrace.c

ptrace: use fsuid, fsgid, effective creds for fs access checks

2016-02-25 11:57:47 -08:00

range.c

range: Do not add new blank slot with add_range_with_merge

2013-06-18 11:32:10 -05:00

rcu.h

…

rcupdate.c

…

rcutiny_plugin.h

…

rcutiny.c

…

rcutorture.c

…

rcutree_plugin.h

…

rcutree_trace.c

…

rcutree.c

rcu: Fix deadlock with CPU hotplug, RCU GP init, and timer migration

2013-06-10 13:37:12 -07:00

rcutree.h

rcu: Don't call wakeup() with rcu_node structure ->lock held

2013-06-10 13:37:11 -07:00

relay.c

…

res_counter.c

…

resource.c

kernel/resource.c: fix muxed resource handling in __request_region()

2016-03-03 15:06:24 -08:00

rtmutex_common.h

…

rtmutex-debug.c

…

rtmutex-debug.h

rtmutex: Handle deadlock detection smarter

2014-07-17 15:58:04 -07:00

rtmutex-tester.c

…

rtmutex.c

rtmutex: Plug slow unlock race

2014-07-17 15:58:04 -07:00

rtmutex.h

rtmutex: Handle deadlock detection smarter

2014-07-17 15:58:04 -07:00

rwsem.c

…

seccomp.c

…

semaphore.c

…

signal.c

signal: remove warning about using SI_TKILL in rt_[tg]sigqueueinfo

2016-08-21 23:22:33 +02:00

smp.c

kernel/smp.c:on_each_cpu_cond(): fix warning in fallback path

2014-09-17 09:03:57 -07:00

smpboot.c

smpboot: Add missing get_online_cpus() in smpboot_register_percpu_thread()

2015-02-11 14:48:17 +08:00

smpboot.h

…

softirq.c

revert "softirq: Add support for triggering softirq work on softirqs"

2015-05-17 09:51:33 -07:00

spinlock.c

…

srcu.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

reboot: rigrate shutdown/reboot to boot cpu

2013-06-12 16:29:44 -07:00

sysctl_binary.c

…

sysctl.c

pipe: limit the per-user amount of pages allocated in pipes

2016-08-21 23:22:36 +02:00

task_work.c

…

taskstats.c

…

test_kprobes.c

…

time.c

time: settimeofday: Validate the values of tv from user

2015-01-29 17:40:56 -08:00

timeconst.bc

…

timer.c

timer: Prevent overflow in apply_slack

2014-06-07 13:25:30 -07:00

tracepoint.c

tracepoint: Do not waste memory on mods with no tracepoints

2014-05-30 21:52:11 -07:00

tsacct.c

…

uid16.c

groups: Consolidate the setgroups permission checks

2015-01-08 09:58:16 -08:00

up.c

…

user_namespace.c

userns: Allow setting gid_maps without privilege when setgroups is disabled

2015-01-08 09:58:17 -08:00

user-return-notifier.c

…

user.c

userns: Add a knob to disable setgroups on a per user namespace basis

2015-01-08 09:58:16 -08:00

utsname_sysctl.c

…

utsname.c

…

wait.c

…

watchdog.c

…

workqueue_internal.h

…

workqueue.c

workqueue: fix ghost PENDING flag while doing MQ IO

2016-06-07 10:42:51 +02:00