mirrors/linux
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-12-28 10:15:32 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
890ed45bde808c422c3c27d3285fc45affa0f930
linux/kernel
History
Christian Brauner 890ed45bde acct: block access to kernel internal filesystems 
There's no point in allowing anything kernel internal nor procfs or
sysfs.

Link: https://lore.kernel.org/r/20250127091811.3183623-1-quzicheng@huawei.com
Link: https://lore.kernel.org/r/20250211-work-acct-v1-2-1c16aecab8b3@kernel.org
Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Reviewed-by: Amir Goldstein <amir73il@gmail.com>
Reported-by: Zicheng Qu <quzicheng@huawei.com>
Cc: stable@vger.kernel.org
Signed-off-by: Christian Brauner <brauner@kernel.org>
2025-02-12 12:24:16 +01:00
..
bpf
Merge tag 'constfy-sysctl-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/sysctl/sysctl
2025-01-29 10:35:40 -08:00
cgroup
Merge tag 'drm-next-2025-01-17' of https://gitlab.freedesktop.org/drm/kernel
2025-01-21 16:09:47 -08:00
configs
configs/debug: make sure PROVE_RCU_LIST=y takes effect
2024-10-28 10:21:09 -07:00
debug
kdb: Remove unused flags stack
2025-01-25 08:22:26 +00:00
dma
dma-debug: fix physical address calculation for struct dma_debug_entry
2024-11-28 10:19:16 +01:00
entry
sched: Add TIF_NEED_RESCHED_LAZY infrastructure
2024-11-05 12:55:37 +01:00
events
kernel: be more careful about dup_mmap() failures and uprobe registering
2025-02-01 03:53:25 -08:00
futex
Merge tag 'locking-urgent-2025-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2025-02-08 10:54:11 -08:00
gcov
gcov: clang: use correct function param names
2025-01-24 22:47:27 -08:00
irq
Merge tag 'irq-core-2025-01-21' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2025-01-21 13:51:07 -08:00
kcsan
kcsan: Remove redundant call of kallsyms_lookup_name()
2024-10-14 16:44:56 +02:00
livepatch
livepatch: Add stack_order sysfs attribute
2024-12-09 11:44:03 +01:00
locking
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
module
Merge tag 'kbuild-v6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
2025-01-31 12:07:07 -08:00
power
Merge tag 'pm-6.14-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2025-01-30 15:10:34 -08:00
printk
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
rcu
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00
sched
Merge tag 'sched-urgent-2025-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2025-02-08 11:16:22 -08:00
time
Merge tag 'timers-urgent-2025-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2025-02-08 11:55:03 -08:00
trace
fgraph: Fix set_graph_notrace with setting TRACE_GRAPH_NOTRACE_BIT
2025-02-08 08:36:45 -05:00
.gitignore
…
acct.c
acct: block access to kernel internal filesystems
2025-02-12 12:24:16 +01:00
async.c
…
audit_fsnotify.c
…
audit_tree.c
fsnotify: create a wrapper fsnotify_find_inode_mark()
2024-04-04 16:24:16 +02:00
audit_watch.c
fsnotify: create a wrapper fsnotify_find_inode_mark()
2024-04-04 16:24:16 +02:00
audit.c
audit: Initialize lsmctx to avoid memory allocation error
2025-01-29 20:02:04 -05:00
audit.h
audit: change context data from secid to lsm_prop
2024-10-11 14:34:16 -04:00
auditfilter.c
audit: fix suffixed '/' filename matching
2024-12-05 19:22:38 -05:00
auditsc.c
Merge tag 'lsm-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm
2025-01-21 20:03:04 -08:00
backtracetest.c
backtracetest: add MODULE_DESCRIPTION()
2024-06-24 22:24:55 -07:00
bounds.c
bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
2024-04-29 08:29:29 -07:00
capability.c
kernel: remove get_task_comm() and print task comm directly
2025-01-12 20:21:15 -08:00
cfi.c
…
compat.c
…
configs.c
…
context_tracking.c
context_tracking, rcu: Rename rcu_dyntick trace event into rcu_watching
2024-08-15 21:30:43 +05:30
cpu_pm.c
…
cpu.c
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00
crash_core.c
kexec/crash: no crash update when kexec in progress
2024-11-05 17:12:27 -08:00
crash_reserve.c
crash: fix crash memory reserve exceed system memory bug
2024-09-01 20:43:30 -07:00
cred.c
cred: remove old {override,revert}_creds() helpers
2024-12-02 11:25:09 +01:00
delayacct.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
dma.c
…
elfcorehdr.c
crash: remove dependency of FA_DUMP on CRASH_DUMP
2024-02-23 17:48:22 -08:00
exec_domain.c
…
exit.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
exit.h
…
extable.c
…
fail_function.c
…
fork.c
kernel: be more careful about dup_mmap() failures and uprobe registering
2025-02-01 03:53:25 -08:00
freezer.c
sched/fair: Fix external p->on_rq users
2024-10-14 09:14:35 +02:00
gen_kheaders.sh
Merge tag 'kbuild-v6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
2025-01-31 12:07:07 -08:00
groups.c
…
hung_task.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
iomem.c
…
irq_work.c
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
2025-01-13 22:40:36 -08:00
jump_label.c
jump_label: Fix static_key_slow_dec() yet again
2024-09-10 11:57:27 +02:00
kallsyms_internal.h
kallsyms: get rid of code for absolute kallsyms
2024-07-20 16:33:21 +09:00
kallsyms_selftest.c
kallsyms: Use kthread_run_on_cpu()
2025-01-02 22:12:12 +01:00
kallsyms_selftest.h
…
kallsyms.c
kallsyms: Match symbols exactly with CONFIG_LTO_CLANG
2024-08-15 09:33:35 -07:00
kcmp.c
get rid of ...lookup...fdget_rcu() family
2024-10-07 13:34:41 -04:00
Kconfig.freezer
…
Kconfig.hz
…
Kconfig.kexec
crash, powerpc: default to CRASH_DUMP=n on PPC_BOOK3S_32
2024-11-14 22:43:48 -08:00
Kconfig.locks
…
Kconfig.preempt
sched: No PREEMPT_RT=y for all{yes,mod}config
2024-11-07 15:25:05 +01:00
kcov.c
kcov: mark in_softirq_really() as __always_inline
2024-12-30 17:59:08 -08:00
kexec_core.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
kexec_elf.c
…
kexec_file.c
kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
2024-09-01 17:59:01 -07:00
kexec_internal.h
kexec: use atomic_try_cmpxchg_acquire() in kexec_trylock()
2024-09-01 20:43:23 -07:00
kexec.c
crash: add a new kexec flag for hotplug support
2024-04-23 14:59:01 +10:00
kheaders.c
kheaders: Simplify attribute through __BIN_ATTR_SIMPLE_RO()
2024-12-24 09:46:49 +01:00
kprobes.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
ksyms_common.c
…
ksysfs.c
kernel/ksysfs.c: simplify bin_attribute definition
2025-01-07 16:59:15 +01:00
kthread.c
kthread: Fix return value on kzalloc() failure in kthread_affine_preferred()
2025-02-04 01:42:27 +01:00
latencytop.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
Makefile
mm: move kernel/numa.c to mm/
2024-09-03 21:15:26 -07:00
module_signature.c
…
notifier.c
reboot: move reboot_notifier_list to kernel/reboot.c
2024-11-05 17:12:31 -08:00
nsproxy.c
fdget(), trivial conversions
2024-11-03 01:28:06 -05:00
padata.c
padata: avoid UAF for reorder_work
2025-01-19 12:44:28 +08:00
panic.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
params.c
module: Constify 'struct module_attribute'
2025-01-26 13:05:23 +01:00
pid_namespace.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
pid_sysctl.h
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
pid.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
profile.c
profiling: remove profile=sleep support
2024-08-04 13:36:28 -07:00
ptrace.c
ptrace_attach: shift send(SIGSTOP) into ptrace_set_stopped()
2024-02-22 15:38:52 -08:00
range.c
…
reboot.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
regset.c
regset: use kvzalloc() for regset_get_alloc()
2024-04-25 21:07:03 -07:00
relay.c
[tree-wide] finally take no_llseek out
2024-09-27 08:18:43 -07:00
resource_kunit.c
resource, kunit: fix user-after-free in resource_test_region_intersects()
2024-10-09 12:47:19 -07:00
resource.c
kernel/resource: simplify API __devm_release_region() implementation
2025-01-12 20:20:58 -08:00
rseq.c
rseq: Fix rseq unregistration regression
2025-01-21 08:10:51 +01:00
scftorture.c
scftorture: Handle NULL argument passed to scf_add_to_free_list().
2024-11-14 16:09:51 -08:00
scs.c
…
seccomp.c
seccomp: passthrough uretprobe systemcall without filtering
2025-02-06 12:48:21 -08:00
signal.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
smp.c
Merge tag 'csd-lock.2025.01.28a' of git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu
2025-01-28 11:34:03 -08:00
smpboot.c
…
smpboot.h
…
softirq.c
softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
2024-12-02 12:01:27 +01:00
stackleak.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
stacktrace.c
…
static_call_inline.c
x86/static-call: provide a way to do very early static-call updates
2024-12-13 09:28:32 +01:00
static_call.c
…
stop_machine.c
stop_machine: Fix rcu_momentary_eqs() call in multi_cpu_stop()
2024-12-11 20:50:47 -08:00
sys_ni.c
Merge tag 'probes-v6.11' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace
2024-07-18 12:19:20 -07:00
sys.c
tracing: Add task_prctl_unknown tracepoint
2024-12-22 20:28:11 -08:00
sysctl-test.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
sysctl.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
task_work.c
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
2025-01-13 22:40:36 -08:00
taskstats.c
fdget(), more trivial conversions
2024-11-03 01:28:06 -05:00
torture.c
torture: Add MODULE_DESCRIPTION()
2024-05-30 15:31:38 -07:00
tracepoint.c
tracing: Fix syscall tracepoint use-after-free
2024-11-01 14:37:31 -04:00
tsacct.c
tsacct: replace strncpy() with strscpy()
2024-07-12 16:39:53 -07:00
ucount.c
ucounts: move kfree() out of critical zone protected by ucounts_lock
2025-01-12 20:21:00 -08:00
uid16.c
…
uid16.h
…
umh.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
up.c
…
user_namespace.c
user_namespace: use kmemdup_array() instead of kmemdup() for multiple allocation
2024-09-09 16:47:42 -07:00
user-return-notifier.c
…
user.c
uidgid: make sure we fit into one cacheline
2024-09-12 12:16:09 +02:00
usermode_driver.c
…
utsname_sysctl.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
utsname.c
…
vhost_task.c
vhost_task: Handle SIGKILL by flushing work and exiting
2024-05-22 08:31:15 -04:00
vmcore_info.c
mm: support only one page_type per page
2024-09-03 21:15:43 -07:00
watch_queue.c
watch_queue: Use page->private instead of page->index
2024-12-22 11:29:51 +01:00
watchdog_buddy.c
…
watchdog_perf.c
watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
2024-07-17 21:11:34 -07:00
watchdog.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
workqueue_internal.h
…
workqueue.c
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00