diff options
author | Wang Weiyang <[email protected]> | 2022-10-25 19:31:01 +0800 |
---|---|---|
committer | Paul Moore <[email protected]> | 2022-11-16 18:28:55 -0500 |
commit | e68bfbd3b3c3a0ec3cf8c230996ad8cabe90322f (patch) | |
tree | 38c521ea4ca6b0b842517a26d1833c9a3e9feef2 /security/integrity/evm/evm_crypto.c | |
parent | 86ef3c735ec81566cd38174ed5e90e9721473064 (diff) |
device_cgroup: Roll back to original exceptions after copy failure
When add the 'a *:* rwm' entry to devcgroup A's whitelist, at first A's
exceptions will be cleaned and A's behavior is changed to
DEVCG_DEFAULT_ALLOW. Then parent's exceptions will be copyed to A's
whitelist. If copy failure occurs, just return leaving A to grant
permissions to all devices. And A may grant more permissions than
parent.
Backup A's whitelist and recover original exceptions after copy
failure.
Cc: [email protected]
Fixes: 4cef7299b478 ("device_cgroup: add proper checking when changing default behavior")
Signed-off-by: Wang Weiyang <[email protected]>
Reviewed-by: Aristeu Rozanski <[email protected]>
Signed-off-by: Paul Moore <[email protected]>
Diffstat (limited to 'security/integrity/evm/evm_crypto.c')
0 files changed, 0 insertions, 0 deletions