Code

[lineage-19] Fix CVE-2021-3968#67

Code

Merged

derfelot merged 9 commits intowhatawurst:lineage-19.1whatawurst/android_kernel_sony_msm8998:lineage-19.1from Flamefire:binder_secid_los19Flamefire/android_kernel_sony_msm8998:binder_secid_los19Copy head branch name to clipboardDec 29, 2022

+138-433

Commits

Commits on Nov 27, 2022

• BACKPORT: ip_gre: add validation for csum_start

  Show description for c084238
  

  BK1603

  authored and

  Flamefire

  committed
  c084238

• BACKPORT: binder: use euid from cred instead of using task

  Show description for fa22aa6
  

  toddkjos

  authored and

  Flamefire

  committed
  fa22aa6

• BACKPORT: binder: use cred instead of task for selinux checks

  Show description for 860c75c
  

  toddkjos

  authored and

  Flamefire

  committed
  860c75c

• FROMGIT: binder: fix test regression due to sender_euid change

  Show description for 2d013da
  

  toddkjos

  authored and

  Flamefire

  committed
  2d013da

• security: introduce CONFIG_SECURITY_WRITABLE_HOOKS

  Show description for 55280c8
  

  James Morris

  authored and

  Flamefire

  committed
  55280c8

• security: mark LSM hooks as __ro_after_init

  Show description for afc5536
  

  James Morris

  authored and

  Flamefire

  committed
  afc5536

• LSM: Initialize security_hook_heads upon registration.

  Show description for 202a251
  

  Tetsuo Handa

  authored and

  Flamefire

  committed
  202a251

• security: Add a cred_getsecid hook

  Show description for 0bcfb58
  

  mjg59

  authored and

  Flamefire

  committed
  0bcfb58

• binder: use cred instead of task for getsecid

  Show description for fd69e40
  

  toddkjos

  authored and

  Flamefire

  committed
  fd69e40