Ensure that direct file execution (e.g. ./script.sh) and indirect file
execution (e.g. sh script.sh) lead to the same result to support script
protection.
Gu Bowen (2):
IMA support script execution check
fix kabi breakage due to exec is_check
Kees Cook (1):
exec: Check __FMODE_EXEC instead of in_execve for LSMs
Linus Torvalds (2):
execve: open the executable file before doing anything else
uselib: remove use of __FMODE_EXEC
Mickaël Salaün (1):
exec: Add a new AT_CHECK flag to execveat(2)
fs/exec.c | 89 ++++++++++++++++++-------------
include/linux/binfmts.h | 5 ++
include/linux/ima.h | 6 +++
include/uapi/linux/fcntl.h | 31 +++++++++++
kernel/audit.h | 1 +
kernel/auditsc.c | 1 +
security/apparmor/lsm.c | 4 +-
security/integrity/ima/ima_main.c | 11 ++++
security/security.c | 19 ++++++-
security/tomoyo/tomoyo.c | 3 +-
10 files changed, 130 insertions(+), 40 deletions(-)
--
2.25.1