OSDN Git Service

userfaultfd: use secure anon inodes for userfaultfd
authorDaniel Colascione <dancol@google.com>
Fri, 8 Jan 2021 22:22:23 +0000 (14:22 -0800)
committerPaul Moore <paul@paul-moore.com>
Thu, 14 Jan 2021 22:40:57 +0000 (17:40 -0500)
commitb537900f1598b67bcb8acac20da73c6e26ebbf99
tree1341b0ece4e5557e6e58d8b8408d56f1c38944fb
parent29cd6591ab6fee3125ea5c1bf350f5013bc615e1
userfaultfd: use secure anon inodes for userfaultfd

This change gives userfaultfd file descriptors a real security
context, allowing policy to act on them.

Signed-off-by: Daniel Colascione <dancol@google.com>
[LG: Remove owner inode from userfaultfd_ctx]
[LG: Use anon_inode_getfd_secure() in userfaultfd syscall]
[LG: Use inode of file in userfaultfd_read() in resolve_userfault_fork()]
Signed-off-by: Lokesh Gidra <lokeshgidra@google.com>
Reviewed-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
fs/userfaultfd.c