From: Seung-Woo Kim <sw0312.kim@samsung.com>
To: james.l.morris@oracle.com, serge@hallyn.com,
        linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org
Cc: sw0312.kim@samsung.com, sumit.semwal@linaro.org,
        linaro-mm-sig@lists.linaro.org, jy0922.shim@samsung.com
Subject: [RFC PATCH] Security: ignore private inode from security_file_receive
Date: Thu, 16 Apr 2015 22:40:56 +0900
Message-id: <1429191656-8866-1-git-send-email-sw0312.kim@samsung.com>
DLP-Filter: Pass
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1297
Lines: 42

The dma-buf fd from anon_inode can be shared across processes, but
there is no way to set security permission for the fd. So this
patch fix just to ignore private inode from security_file_receive.

Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
---

If security like smack is enabled, the dmabuf fd can not be shared between
processes via unix domain socket. I am not familiar with security, so I am
not sure that this kind of patch can be acceptable.

Is there other option to share dmabuf fd via socket with security check?

Best Regards,
- Seung-Woo Kim

---
 security/security.c |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/security/security.c b/security/security.c
index 730ac65..c57354c 100644
--- a/security/security.c
+++ b/security/security.c
@@ -810,6 +810,9 @@ int security_file_send_sigiotask(struct task_struct *tsk,
 
 int security_file_receive(struct file *file)
 {
+
+	if (unlikely(IS_PRIVATE(file->f_path.dentry->d_inode)))
+		return 0;
 	return security_ops->file_receive(file);
 }
 
-- 
1.7.4.1

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/