dect
/
linux-2.6
Archived
13
0
Fork 0
Code Releases Activity
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
linux-2.6/drivers/pci
History
Chris Wright a628e7b87e pci: use security_capable() when checking capablities during config space read 
This reintroduces commit 47970b1b which was subsequently reverted
as f00eaeea.  The original change was broken and caused X startup
failures and generally made privileged processes incapable of reading
device dependent config space.  The normal capable() interface returns
true on success, but the LSM interface returns 0 on success.  This thinko
is now fixed in this patch, and has been confirmed to work properly.

So, once again...Eric Paris noted that commit de139a3 ("pci: check caps
from sysfs file open to read device dependent config space") caused the
capability check to bypass security modules and potentially auditing.
Rectify this by calling security_capable() when checking the open file's
capabilities for config space reads.

Reported-by: Eric Paris <eparis@redhat.com>
Tested-by: Dave Young <hidave.darkstar@gmail.com>
Acked-by: James Morris <jmorris@namei.org>
Cc: Dave Airlie <airlied@gmail.com>
Cc: Alex Riesen <raa.lkml@gmail.com>
Cc: Sedat Dilek <sedat.dilek@googlemail.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: James Morris <jmorris@namei.org>
 		2011-02-15 19:06:31 +11:00
..
hotplug headers: kobject.h redux 2011-01-10 08:51:44 -08:00
pcie kconfig: rename CONFIG_EMBEDDED to CONFIG_EXPERT 2011-01-20 17:02:05 -08:00
.gitignore
…
Kconfig xen/pci: Make xen-pcifront be dependent on XEN_XENBUS_FRONTEND 2011-01-05 16:31:12 -05:00
Makefile pci root complex: support for tile architecture 2010-11-24 13:13:49 -05:00
access.c
…
bus.c Revert "PCI: allocate bus resources from the top down" 2010-12-17 10:00:54 -08:00
dmar.c x86, vt-d: Handle previous faults after enabling fault handling 2010-12-13 16:53:57 -08:00
hotplug-pci.c
…
hotplug.c
…
htirq.c
…
intel-iommu.c
…
intr_remapping.c
…
intr_remapping.h
…
ioapic.c
…
iov.c
…
iova.c
…
irq.c
…
msi.c PCI: Add mask bit definition for MSI-X table 2010-12-23 12:53:08 -08:00
msi.h PCI: MSI: Move MSI-X entry definition to pci_regs.h 2010-12-23 12:53:07 -08:00
pci-acpi.c PCI/PM: Report wakeup events before resuming devices 2011-01-14 08:55:43 -08:00
pci-driver.c PCI: fix __pci_device_probe kernel-doc warning 2010-12-23 12:53:09 -08:00
pci-label.c
…
pci-stub.c PCI: pci-stub: ignore zero-length id parameters 2010-12-23 12:53:52 -08:00
pci-sysfs.c pci: use security_capable() when checking capablities during config space read 2011-02-15 19:06:31 +11:00
pci.c PCI/PM: Report wakeup events before resuming devices 2011-01-14 08:55:43 -08:00
pci.h PCI/PM: Use pm_wakeup_event() directly for reporting wakeup events 2011-01-14 08:55:43 -08:00
probe.c PCI: log vendor/device ID always 2010-10-17 20:03:05 -07:00
proc.c BKL: remove extraneous #include <smp_lock.h> 2010-11-17 08:59:32 -08:00
quirks.c Merge branches 'x86-fixes-for-linus' and 'perf-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip 2010-12-19 10:44:54 -08:00
remove.c
…
rom.c
…
search.c
…
setup-bus.c
…
setup-irq.c
…
setup-res.c PCI: fix message typo 2010-10-17 20:03:05 -07:00
slot.c
…
syscall.c
…
vpd.c
…
xen-pcifront.c xen-pcifront: fix PCI reference leak 2010-11-08 11:41:15 -05:00