diff options
author | Anthony G. Basile <blueness@gentoo.org> | 2013-09-29 15:13:23 -0400 |
---|---|---|
committer | Anthony G. Basile <blueness@gentoo.org> | 2013-09-29 15:13:23 -0400 |
commit | 290728f2970dde95a2499c72844cff0e09f97bae (patch) | |
tree | b4ca1da3752b0a685a81a96d77253d2463c5e80a /3.11.2/4427_force_XATTR_PAX_tmpfs.patch | |
parent | Grsec/PaX: 2.9.1-3.11.1-201309221838 (diff) | |
download | hardened-patchset-290728f2970dde95a2499c72844cff0e09f97bae.tar.gz hardened-patchset-290728f2970dde95a2499c72844cff0e09f97bae.tar.bz2 hardened-patchset-290728f2970dde95a2499c72844cff0e09f97bae.zip |
Grsec/PaX: 2.9.1-{2.6.32.61,3.2.51,3.11.2}-20130928110220130928
Diffstat (limited to '3.11.2/4427_force_XATTR_PAX_tmpfs.patch')
-rw-r--r-- | 3.11.2/4427_force_XATTR_PAX_tmpfs.patch | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/3.11.2/4427_force_XATTR_PAX_tmpfs.patch b/3.11.2/4427_force_XATTR_PAX_tmpfs.patch new file mode 100644 index 0000000..23e60cd --- /dev/null +++ b/3.11.2/4427_force_XATTR_PAX_tmpfs.patch @@ -0,0 +1,35 @@ +From: Anthony G. Basile <blueness@gentoo.org> + +For users that emerge without XATTR_PAX support enabled, we still want user.pax.flags +namespace supported on tmpfs so that the PaX markings survive emerge. + +diff -Naur a/mm/shmem.c b/mm/shmem.c +--- a/mm/shmem.c 2013-06-11 21:00:18.000000000 -0400 ++++ b/mm/shmem.c 2013-06-11 21:08:18.000000000 -0400 +@@ -2232,11 +2232,7 @@ + static int shmem_xattr_validate(const char *name) + { + struct { const char *prefix; size_t len; } arr[] = { +- +-#ifdef CONFIG_PAX_XATTR_PAX_FLAGS + { XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN}, +-#endif +- + { XATTR_SECURITY_PREFIX, XATTR_SECURITY_PREFIX_LEN }, + { XATTR_TRUSTED_PREFIX, XATTR_TRUSTED_PREFIX_LEN } + }; +@@ -2292,14 +2288,12 @@ + if (err) + return err; + +-#ifdef CONFIG_PAX_XATTR_PAX_FLAGS + if (!strncmp(name, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN)) { + if (strcmp(name, XATTR_NAME_PAX_FLAGS)) + return -EOPNOTSUPP; + if (size > 8) + return -EINVAL; + } +-#endif + + return simple_xattr_set(&info->xattrs, name, value, size, flags); + } |