Stephen Smalley 4a9b16541a lsm: hold cred_guard_mutex for lsm_set_self_attr() ...

Just as proc_pid_attr_write() already does before calling the LSM
hook. This only matters for SELinux and AppArmor which check
whether the process is being ptraced and if so, whether to
allow the transition.

Cc: stable@vger.kernel.org
Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2026-05-14 16:47:59 -04:00

..

apparmor

Merge tag 'apparmor-pr-2026-04-23' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2026-04-24 09:22:21 -07:00

bpf

lsm: replace the name field with a pointer to the lsm_id struct

2025-10-22 19:24:18 -04:00

integrity

Merge tag 'integrity-v7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2026-04-17 15:42:01 -07:00

ipe

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

keys

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

landlock

landlock: Clarify BUILD_BUG_ON check in scoping logic

2026-04-07 18:51:07 +02:00

loadpin

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

lockdown

lockdown: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

safesetid

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

selinux

Merge tag 'mm-stable-2026-04-13-21-45' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-04-15 12:59:16 -07:00

smack

Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2026-04-14 18:36:10 -07:00

tomoyo

tomoyo: use u64 for holding inode->i_ino value

2026-04-15 00:00:10 +09:00

yama

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

commoncap_test.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

commoncap.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

device_cgroup.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

inode.c

securityfs: use kstrdup_const() to manage symlink targets

2026-03-17 17:13:36 -04:00

Kconfig

proc: make PROC_MEM_FORCE_PTRACE the Kconfig default

2026-04-13 09:12:37 -07:00

Kconfig.hardening

rust: add bitmap API.

2025-09-22 15:52:44 -04:00

lsm_audit.c

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

lsm_init.c

lsm: add backing_file LSM hooks

2026-04-03 16:53:50 -04:00

lsm_notifier.c

lsm: split the notifier code out into lsm_notifier.c

2025-10-22 19:24:15 -04:00

lsm_syscalls.c

lsm: hold cred_guard_mutex for lsm_set_self_attr()

2026-05-14 16:47:59 -04:00

lsm.h

lsm: add backing_file LSM hooks

2026-04-03 16:53:50 -04:00

Makefile

lsm: split the init code out into lsm_init.c

2025-10-22 19:24:16 -04:00

min_addr.c

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

2026-01-29 13:56:53 -05:00

security.c

Merge tag 'landlock-7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

2026-04-13 15:42:19 -07:00