Richard Guy Briggs 533c7b69c7 audit: use proper refcount locking on audit_sock ...

Resetting audit_sock appears to be racy.

audit_sock was being copied and dereferenced without using a refcount on
the source sock.

Bump the refcount on the underlying sock when we store a refrence in
audit_sock and release it when we reset audit_sock.  audit_sock
modification needs the audit_cmd_mutex.

See: https://lkml.org/lkml/2016/11/26/232

Thanks to Eric Dumazet <edumazet@google.com> and Cong Wang
<xiyou.wangcong@gmail.com> on ideas how to fix it.

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Reviewed-by: Cong Wang <xiyou.wangcong@gmail.com>
[PM: fixed the comment block text formatting for auditd_reset()]
Signed-off-by: Paul Moore <paul@paul-moore.com>

2016-12-14 13:06:04 -05:00

..

bpf

bpf: fix bpf_skb_in_cgroup helper naming

2016-08-12 21:53:33 -07:00

configs

kconfig: tinyconfig: provide whole choice blocks to avoid warnings

2016-09-01 17:52:01 -07:00

debug

…

events

perf/core: Limit matching exclusive events to one PMU

2016-09-22 14:56:09 +02:00

gcov

gcov: add support for gcc version >= 6

2016-07-15 14:54:27 +09:00

irq

genirq: Skip chained interrupt trigger setup if type is IRQ_TYPE_NONE

2016-09-19 11:31:36 +02:00

livepatch

modules: add ro_after_init support

2016-08-04 10:16:55 +09:30

locking

locking/pvqspinlock: Fix a bug in qstat_read()

2016-08-10 14:13:29 +02:00

power

PM / QoS: avoid calling cancel_delayed_work_sync() during early boot

2016-09-05 15:07:53 +02:00

printk

printk/nmi: avoid direct printk()-s from __printk_nmi_flush()

2016-09-01 17:52:01 -07:00

rcu

Merge branch 'smp-hotplug-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2016-07-29 13:55:30 -07:00

sched

sched/core: Fix a race between try_to_wake_up() and a woken up task

2016-09-05 11:57:53 +02:00

time

tick/nohz: Fix softlockup on scheduler stalls in kvm guest

2016-09-02 10:25:40 +02:00

trace

Merge tag 'trace-v4.8-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

2016-09-25 18:40:13 -07:00

.gitignore

…

acct.c

…

async.c

…

audit_fsnotify.c

audit: fix formatting of AUDIT_CONFIG_CHANGE events

2016-11-20 15:38:00 -05:00

audit_tree.c

audit: fix formatting of AUDIT_CONFIG_CHANGE events

2016-11-20 15:38:00 -05:00

audit_watch.c

audit: fix formatting of AUDIT_CONFIG_CHANGE events

2016-11-20 15:38:00 -05:00

audit.c

audit: use proper refcount locking on audit_sock

2016-12-14 13:06:04 -05:00

audit.h

Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/audit

2016-07-29 17:54:17 -07:00

auditfilter.c

audit: add support for session ID user filter

2016-11-29 15:10:12 -05:00

auditsc.c

audit: add support for session ID user filter

2016-11-29 15:10:12 -05:00

backtracetest.c

…

bounds.c

…

capability.c

kernel: Add noaudit variant of ns_capable()

2016-06-06 20:16:18 +10:00

cgroup_freezer.c

…

cgroup_pids.c

cgroup: Use lld instead of ld when printing pids controller events_limit

2016-06-21 15:03:36 -04:00

cgroup.c

Merge branch 'for-4.8-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup

2016-09-27 16:43:11 -07:00

compat.c

…

configs.c

…

context_tracking.c

…

cpu_pm.c

…

cpu.c

timers/core: Correct callback order during CPU hot plug

2016-07-28 18:56:22 +02:00

cpuset.c

cpuset: fix non static symbol warning

2016-09-16 11:31:17 -04:00

crash_dump.c

…

cred.c

cred: Reject inodes with invalid ids in set_create_file_as()

2016-06-30 18:05:09 -05:00

delayacct.c

…

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

mm, mempolicy: task->mempolicy must be NULL before dropping final reference

2016-09-01 17:52:01 -07:00

extable.c

…

fork.c

Merge branch 'akpm' (patches from Andrew)

2016-09-01 18:23:22 -07:00

freezer.c

freezer, oom: check TIF_MEMDIE on the correct task

2016-07-28 16:07:41 -07:00

futex_compat.c

…

futex.c

futex: Assume all mappings are private on !MMU systems

2016-07-29 18:44:14 +02:00

groups.c

…

hung_task.c

…

irq_work.c

…

jump_label.c

Merge tag 'powerpc-4.8-2' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

2016-08-05 09:00:54 -04:00

kallsyms.c

…

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

kernel/kcov: unproxify debugfs file's fops

2016-06-15 04:56:35 -07:00

kexec_core.c

kexec: add restriction on kexec_load() segment sizes

2016-08-02 19:35:31 -04:00

kexec_file.c

kexec: fix double-free when failing to relocate the purgatory

2016-09-01 17:52:01 -07:00

kexec_internal.h

…

kexec.c

kexec: allow architectures to override boot mapping

2016-08-02 19:35:27 -04:00

kmod.c

…

kprobes.c

…

ksysfs.c

kexec: add a kexec_crash_loaded() function

2016-08-02 19:35:30 -04:00

kthread.c

…

latencytop.c

…

Makefile

ELF/MIPS build fix

2016-05-23 17:04:14 -07:00

membarrier.c

…

memremap.c

mm: fix cache mode of dax pmd mappings

2016-09-09 17:34:46 -07:00

module_signing.c

KEYS: Move the point of trust determination to __key_link()

2016-04-11 22:43:43 +01:00

module-internal.h

…

module.c

Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

2016-08-04 09:14:38 -04:00

notifier.c

…

nsproxy.c

…

padata.c

kernel/padata.c: hide unused functions

2016-05-19 19:12:14 -07:00

panic.c

kexec: use core_param for crash_kexec_post_notifiers boot option

2016-08-02 19:35:29 -04:00

params.c

…

pid_namespace.c

…

pid.c

remove lots of IS_ERR_VALUE abuses

2016-05-27 15:26:11 -07:00

profile.c

profile: Convert to hotplug state machine

2016-07-15 10:41:42 +02:00

ptrace.c

tree-wide: replace config_enabled() with IS_ENABLED()

2016-08-04 08:50:07 -04:00

range.c

…

reboot.c

…

relay.c

relay: add global mode support for buffer-only channels

2016-08-02 19:35:41 -04:00

resource.c

/proc/iomem: only expose physical resource addresses to privileged users

2016-04-14 12:56:09 -07:00

seccomp.c

seccomp: Fix tracer exit notifications during fatal signals

2016-08-30 16:12:46 -07:00

signal.c

signals: Use hrtimer for sigtimedwait()

2016-07-07 10:35:07 +02:00

smp.c

Merge branch 'smp-hotplug-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2016-07-29 13:55:30 -07:00

smpboot.c

…

smpboot.h

…

softirq.c

arch, ftrace: for KASAN put hard/soft IRQ entries into separate sections

2016-03-25 16:37:42 -07:00

stacktrace.c

…

stop_machine.c

stop_machine: Touch_nmi_watchdog() after MULTI_STOP_PREPARE

2016-07-27 11:12:11 +02:00

sys_ni.c

…

sys.c

prctl: make PR_SET_THP_DISABLE wait for mmap_sem killable

2016-05-23 17:04:14 -07:00

sysctl_binary.c

kernel/sysctl_binary.c: use generic UUID library

2016-05-20 17:58:30 -07:00

sysctl.c

sysctl: handle error writing UINT_MAX to u32 fields

2016-08-26 17:39:35 -07:00

task_work.c

task_work: use READ_ONCE/lockless_dereference, avoid pi_lock if !task_works

2016-08-02 19:35:02 -04:00

taskstats.c

taskstats: use the libnl API to align nlattr on 64-bit

2016-04-23 20:13:25 -04:00

test_kprobes.c

…

torture.c

torture: Stop onoff task if there is only one cpu

2016-06-14 16:03:28 -07:00

tracepoint.c

kernel/...: convert pr_warning to pr_warn

2016-03-22 15:36:02 -07:00

tsacct.c

…

uid16.c

…

up.c

…

user_namespace.c

fs: Limit file caps to the user namespace of the super block

2016-06-24 10:40:31 -05:00

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

watchdog.c

Revert "perf/x86/intel, watchdog: Switch NMI watchdog to ref cycles on x86"

2016-07-10 20:58:36 +02:00

workqueue_internal.h

…

workqueue.c

Merge branch 'smp-hotplug-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2016-07-29 13:55:30 -07:00