Code

[lineage-20] Fix CVE-2021-3968#77

Code

Merged

derfelot merged 9 commits intowhatawurst:lineage-20whatawurst/android_kernel_sony_msm8998:lineage-20from Flamefire:binder_secid_los20Flamefire/android_kernel_sony_msm8998:binder_secid_los20Copy head branch name to clipboardDec 29, 2022

+138-433

Commits

Commits on Nov 27, 2022

• BACKPORT: ip_gre: add validation for csum_start

  Show description for 0626f53
  

  BK1603

  authored and

  Flamefire

  committed
  0626f53

• BACKPORT: binder: use euid from cred instead of using task

  Show description for 65f5b95
  

  toddkjos

  authored and

  Flamefire

  committed
  65f5b95

• BACKPORT: binder: use cred instead of task for selinux checks

  Show description for 28d2109
  

  toddkjos

  authored and

  Flamefire

  committed
  28d2109

• FROMGIT: binder: fix test regression due to sender_euid change

  Show description for e4531c3
  

  toddkjos

  authored and

  Flamefire

  committed
  e4531c3

• security: introduce CONFIG_SECURITY_WRITABLE_HOOKS

  Show description for 8cfcb43
  

  James Morris

  authored and

  Flamefire

  committed
  8cfcb43

• security: mark LSM hooks as __ro_after_init

  Show description for 2cabff6
  

  James Morris

  authored and

  Flamefire

  committed
  2cabff6

• LSM: Initialize security_hook_heads upon registration.

  Show description for 89a157a
  

  Tetsuo Handa

  authored and

  Flamefire

  committed
  89a157a

• security: Add a cred_getsecid hook

  Show description for 37e9129
  

  mjg59

  authored and

  Flamefire

  committed
  37e9129

• binder: use cred instead of task for getsecid

  Show description for 3b5f43c
  

  toddkjos

  authored and

  Flamefire

  committed
  3b5f43c