Re: [PATCH v4 3/3] binder: use euid from cred instead of using task

2021-10-12 Thread Stephen Smalley
On Mon, Oct 11, 2021 at 7:39 PM Todd Kjos wrote: > > On Mon, Oct 11, 2021 at 2:39 PM Paul Moore wrote: > > > > On Fri, Oct 8, 2021 at 5:24 PM Todd Kjos wrote: > > > > > > On Fri, Oct 8, 2021 at 2:12 PM Paul Moore wrote: > > > > > > > > On Wed, Oct 6, 2021 at 8:46 PM Todd Kjos wrote: > > > > >

Re: [PATCH v4 3/3] binder: use euid from cred instead of using task

2021-10-11 Thread Paul Moore
On Fri, Oct 8, 2021 at 5:24 PM Todd Kjos wrote: > > On Fri, Oct 8, 2021 at 2:12 PM Paul Moore wrote: > > > > On Wed, Oct 6, 2021 at 8:46 PM Todd Kjos wrote: > > > > > > Set a transaction's sender_euid from the 'struct cred' > > > saved at binder_open() instead of looking up the euid > > > from t

Re: [PATCH v4 3/3] binder: use euid from cred instead of using task

2021-10-11 Thread Paul Moore
On Fri, Oct 8, 2021 at 5:25 PM Casey Schaufler wrote: > > On 10/8/2021 2:12 PM, Paul Moore wrote: > > On Wed, Oct 6, 2021 at 8:46 PM Todd Kjos wrote: > >> Set a transaction's sender_euid from the 'struct cred' > >> saved at binder_open() instead of looking up the euid > >> from the binder proc's

Re: [PATCH v4 3/3] binder: use euid from cred instead of using task

2021-10-08 Thread Casey Schaufler
On 10/8/2021 2:12 PM, Paul Moore wrote: > On Wed, Oct 6, 2021 at 8:46 PM Todd Kjos wrote: >> Set a transaction's sender_euid from the 'struct cred' >> saved at binder_open() instead of looking up the euid >> from the binder proc's 'struct task'. This ensures >> the euid is associated with the secu

Re: [PATCH v4 3/3] binder: use euid from cred instead of using task

2021-10-08 Thread Paul Moore
On Wed, Oct 6, 2021 at 8:46 PM Todd Kjos wrote: > > Set a transaction's sender_euid from the 'struct cred' > saved at binder_open() instead of looking up the euid > from the binder proc's 'struct task'. This ensures > the euid is associated with the security context that > of the task that opened