diff options
author | Anthony G. Basile <blueness@gentoo.org> | 2015-02-28 14:52:11 -0500 |
---|---|---|
committer | Anthony G. Basile <blueness@gentoo.org> | 2015-02-28 14:52:11 -0500 |
commit | c9a0d6a9244b7424def3525bb719686354aed5f4 (patch) | |
tree | ec850fdf0a7b1efb0fa7829a56d7b33454d739f5 /3.18.8/4427_force_XATTR_PAX_tmpfs.patch | |
parent | Grsec/PaX: 3.1-{3.2.67,3.14.33,3.18.7}-201502222138 (diff) | |
download | hardened-patchset-c9a0d6a9244b7424def3525bb719686354aed5f4.tar.gz hardened-patchset-c9a0d6a9244b7424def3525bb719686354aed5f4.tar.bz2 hardened-patchset-c9a0d6a9244b7424def3525bb719686354aed5f4.zip |
Grsec/PaX: 3.1-{3.2.67,3.14.34,3.18.8}-20150227184320150227
Diffstat (limited to '3.18.8/4427_force_XATTR_PAX_tmpfs.patch')
-rw-r--r-- | 3.18.8/4427_force_XATTR_PAX_tmpfs.patch | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/3.18.8/4427_force_XATTR_PAX_tmpfs.patch b/3.18.8/4427_force_XATTR_PAX_tmpfs.patch new file mode 100644 index 0000000..22c9273 --- /dev/null +++ b/3.18.8/4427_force_XATTR_PAX_tmpfs.patch @@ -0,0 +1,35 @@ +From: Anthony G. Basile <blueness@gentoo.org> + +For users that emerge without XATTR_PAX support enabled, we still want user.pax.flags +namespace supported on tmpfs so that the PaX markings survive emerge. + +diff -Naur a/mm/shmem.c b/mm/shmem.c +--- a/mm/shmem.c 2013-06-11 21:00:18.000000000 -0400 ++++ b/mm/shmem.c 2013-06-11 21:08:18.000000000 -0400 +@@ -2558,11 +2558,7 @@ + static int shmem_xattr_validate(const char *name) + { + struct { const char *prefix; size_t len; } arr[] = { +- +-#ifdef CONFIG_PAX_XATTR_PAX_FLAGS + { XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN}, +-#endif +- + { XATTR_SECURITY_PREFIX, XATTR_SECURITY_PREFIX_LEN }, + { XATTR_TRUSTED_PREFIX, XATTR_TRUSTED_PREFIX_LEN } + }; +@@ -2618,14 +2614,12 @@ + if (err) + return err; + +-#ifdef CONFIG_PAX_XATTR_PAX_FLAGS + if (!strncmp(name, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN)) { + if (strcmp(name, XATTR_NAME_PAX_FLAGS)) + return -EOPNOTSUPP; + if (size > 8) + return -EINVAL; + } +-#endif + + return simple_xattr_set(&info->xattrs, name, value, size, flags); + } |