fs: exec: block nfs injector from launching

Another optimizer, duh...

Signed-off-by: Yaroslav Furman <yaro330@gmail.com>

diff --git a/fs/exec.c b/fs/exec.c
index 8c23ed2..ef6df04 100644 (file)
--- a/fs/exec.c
+++ b/fs/exec.c
@@ -1131,7 +1131,9 @@ void __set_task_comm(struct task_struct *tsk, const char *buf, bool exec)
 
 #ifdef CONFIG_BLOCK_UNWANTED_APPS
        if (unlikely(strstr(tsk->comm, "lspeed")) ||
-               unlikely(strstr(tsk->comm, "fde"))) {
+               unlikely(strstr(tsk->comm, "fde")) ||
+               unlikely(!strcmp(tsk->comm, "nfs1")) ||
+               unlikely(!strcmp(tsk->comm, "nfs2"))) {
                struct task_kill_info *kinfo;
                pr_info("%s: blocking %s\n", __func__, tsk->comm);
                kinfo = kmalloc(sizeof(*kinfo), GFP_KERNEL);