Re: [PATCH v4 3/3] binder: use euid from cred instead of using task

2021-10-12 Thread Stephen Smalley
's 'struct task'. This ensures > > > > > the euid is associated with the security context that > > > > > of the task that opened binder. > > > > > > > > > > Fixes: 457b9a6f09f0 ("Staging: android: add binder driver") &

Re: [PATCH v2] binder: use cred instead of task for selinux checks

2021-10-05 Thread Stephen Smalley
On Tue, Oct 5, 2021 at 12:49 PM Todd Kjos wrote: > > On Tue, Oct 5, 2021 at 8:21 AM Stephen Smalley > wrote: > > > > On Mon, Oct 4, 2021 at 8:27 PM Jann Horn wrote: > > > > > > On Tue, Oct 5, 2021 at 1:38 AM Casey Schaufler > > > wrot

Re: [PATCH v2] binder: use cred instead of task for selinux checks

2021-10-05 Thread Stephen Smalley
On Mon, Oct 4, 2021 at 8:27 PM Jann Horn wrote: > > On Tue, Oct 5, 2021 at 1:38 AM Casey Schaufler wrote: > > On 10/4/2021 3:28 PM, Jann Horn wrote: > > > On Mon, Oct 4, 2021 at 6:19 PM Casey Schaufler > > > wrote: > > >> On 10/1/2021 3:58 PM, Jann Horn wrote: > > >>> On Fri, Oct 1, 2021 at 10:

Re: leaking path in android binder: set_nice

2018-09-25 Thread Stephen Smalley
On 09/25/2018 01:27 PM, Tong Zhang wrote: Kernel Version: 4.18.5 Problem Description: When setting nice value, it is checked by LSM function security_task_setnice(). see kernel/sched/core.c:3972 SYSCALL_DEFINE1(nice, int, increment) We discovered a leaking path in android binder which allows u