* [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 arch
[not found] <20080827134541.19980.61042.stgit@warthog.procyon.org.uk>
@ 2008-08-27 13:45 ` David Howells
2008-08-27 14:55 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 Artem Bityutskiy
0 siblings, 1 reply; 4+ messages in thread
From: David Howells @ 2008-08-27 13:45 UTC (permalink / raw)
To: linux-kernel
Cc: linux-security-module, David Howells, Serge Hallyn, Tony Luck,
linux-ia64
Wrap access to task credentials so that they can be separated more easily from
the task_struct during the introduction of COW creds.
Change most current->(|e|s|fs)[ug]id to current_(|e|s|fs)[ug]id().
Change some task->e?[ug]id to task_e?[ug]id(). In some places it makes more
sense to use RCU directly rather than a convenient wrapper; these will be
addressed by later patches.
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: James Morris <jmorris@namei.org>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Cc: Tony Luck <tony.luck@intel.com>
Cc: linux-ia64@vger.kernel.org
---
arch/ia64/kernel/mca_drv.c | 2 +-
arch/ia64/kernel/perfmon.c | 23 +++++++++++++----------
arch/ia64/kernel/signal.c | 4 ++--
3 files changed, 16 insertions(+), 13 deletions(-)
diff --git a/arch/ia64/kernel/mca_drv.c b/arch/ia64/kernel/mca_drv.c
index fab1d21..f94aaa8 100644
--- a/arch/ia64/kernel/mca_drv.c
+++ b/arch/ia64/kernel/mca_drv.c
@@ -158,7 +158,7 @@ mca_handler_bh(unsigned long paddr, void *iip, unsigned long ipsr)
ia64_mlogbuf_dump();
printk(KERN_ERR "OS_MCA: process [cpu %d, pid: %d, uid: %d, "
"iip: %p, psr: 0x%lx,paddr: 0x%lx](%s) encounters MCA.\n",
- raw_smp_processor_id(), current->pid, current->uid,
+ raw_smp_processor_id(), current->pid, current_uid(),
iip, ipsr, paddr, current->comm);
spin_lock(&mca_bh_lock);
diff --git a/arch/ia64/kernel/perfmon.c b/arch/ia64/kernel/perfmon.c
index fc8f350..ffe6de0 100644
--- a/arch/ia64/kernel/perfmon.c
+++ b/arch/ia64/kernel/perfmon.c
@@ -2224,8 +2224,8 @@ pfm_alloc_file(pfm_context_t *ctx)
DPRINT(("new inode ino=%ld @%p\n", inode->i_ino, inode));
inode->i_mode = S_IFCHR|S_IRUGO;
- inode->i_uid = current->fsuid;
- inode->i_gid = current->fsgid;
+ inode->i_uid = current_fsuid();
+ inode->i_gid = current_fsgid();
sprintf(name, "[%lu]", inode->i_ino);
this.name = name;
@@ -2403,22 +2403,25 @@ error_kmem:
static int
pfm_bad_permissions(struct task_struct *task)
{
+ uid_t uid = current_uid();
+ gid_t gid = current_gid();
+
/* inspired by ptrace_attach() */
DPRINT(("cur: uid=%d gid=%d task: euid=%d suid=%d uid=%d egid=%d sgid=%d\n",
- current->uid,
- current->gid,
+ uid,
+ gid,
task->euid,
task->suid,
task->uid,
task->egid,
task->sgid));
- return ((current->uid != task->euid)
- || (current->uid != task->suid)
- || (current->uid != task->uid)
- || (current->gid != task->egid)
- || (current->gid != task->sgid)
- || (current->gid != task->gid)) && !capable(CAP_SYS_PTRACE);
+ return (uid != task->euid)
+ || (uid != task->suid)
+ || (uid != task->uid)
+ || (gid != task->egid)
+ || (gid != task->sgid)
+ || (gid != task->gid)) && !capable(CAP_SYS_PTRACE);
}
static int
diff --git a/arch/ia64/kernel/signal.c b/arch/ia64/kernel/signal.c
index 19c5a78..434e93e 100644
--- a/arch/ia64/kernel/signal.c
+++ b/arch/ia64/kernel/signal.c
@@ -228,7 +228,7 @@ ia64_rt_sigreturn (struct sigscratch *scr)
si.si_errno = 0;
si.si_code = SI_KERNEL;
si.si_pid = task_pid_vnr(current);
- si.si_uid = current->uid;
+ si.si_uid = current_uid();
si.si_addr = sc;
force_sig_info(SIGSEGV, &si, current);
return retval;
@@ -325,7 +325,7 @@ force_sigsegv_info (int sig, void __user *addr)
si.si_errno = 0;
si.si_code = SI_KERNEL;
si.si_pid = task_pid_vnr(current);
- si.si_uid = current->uid;
+ si.si_uid = current_uid();
si.si_addr = addr;
force_sig_info(SIGSEGV, &si, current);
return 0;
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [PATCH 01/59] CRED: Wrap task credential accesses in the IA64
2008-08-27 13:45 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 arch David Howells
@ 2008-08-27 14:55 ` Artem Bityutskiy
2008-08-27 15:24 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 arch David Howells
0 siblings, 1 reply; 4+ messages in thread
From: Artem Bityutskiy @ 2008-08-27 14:55 UTC (permalink / raw)
To: David Howells
Cc: linux-kernel, linux-security-module, Serge Hallyn, Tony Luck,
linux-ia64
David Howells wrote:
> Wrap access to task credentials so that they can be separated more easily from
> the task_struct during the introduction of COW creds.
>
> Change most current->(|e|s|fs)[ug]id to current_(|e|s|fs)[ug]id().
>
> Change some task->e?[ug]id to task_e?[ug]id(). In some places it makes more
> sense to use RCU directly rather than a convenient wrapper; these will be
> addressed by later patches.
>
> Signed-off-by: David Howells <dhowells@redhat.com>
> Reviewed-by: James Morris <jmorris@namei.org>
> Acked-by: Serge Hallyn <serue@us.ibm.com>
> Cc: Tony Luck <tony.luck@intel.com>
> Cc: linux-ia64@vger.kernel.org
Fine with me. Do you want us to put this patch to ubifs-2.6.git or you
prefer to make it go together with the rest of the CRED patches?
--
Best Regards,
Artem Bityutskiy (Артём Битюцкий)
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 arch
2008-08-27 14:55 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 Artem Bityutskiy
@ 2008-08-27 15:24 ` David Howells
2008-08-27 23:21 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 Stephen Rothwell
0 siblings, 1 reply; 4+ messages in thread
From: David Howells @ 2008-08-27 15:24 UTC (permalink / raw)
To: Artem Bityutskiy, Stephen Rothwell
Cc: dhowells, linux-kernel, linux-security-module, Serge Hallyn,
Tony Luck, linux-ia64
Artem Bityutskiy <dedekind@yandex.ru> wrote:
> Fine with me.
Can I count that as an Acked-by?
> Do you want us to put this patch to ubifs-2.6.git or you
> prefer to make it go together with the rest of the CRED patches?
Ummm... I'll check. I'm not sure exactly how Stephen wanted to play this.
David
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH 01/59] CRED: Wrap task credential accesses in the IA64
2008-08-27 15:24 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 arch David Howells
@ 2008-08-27 23:21 ` Stephen Rothwell
0 siblings, 0 replies; 4+ messages in thread
From: Stephen Rothwell @ 2008-08-27 23:21 UTC (permalink / raw)
To: David Howells
Cc: Artem Bityutskiy, linux-kernel, linux-security-module,
Serge Hallyn, Tony Luck, linux-ia64
[-- Attachment #1: Type: text/plain, Size: 990 bytes --]
Hi David, Artem,
On Wed, 27 Aug 2008 16:24:38 +0100 David Howells <dhowells@redhat.com> wrote:
>
> Artem Bityutskiy <dedekind@yandex.ru> wrote:
>
> > Fine with me.
>
> Can I count that as an Acked-by?
>
> > Do you want us to put this patch to ubifs-2.6.git or you
> > prefer to make it go together with the rest of the CRED patches?
>
> Ummm... I'll check. I'm not sure exactly how Stephen wanted to play this.
I am happy for these patches to go into both the subsystem and creds
trees (the mess - if any - will be on my head). I do expect this to
reduce conflicts in the longer term.
It is much better for that to happen than for a subsystem maintainer to
apply a slightly different fixup when I find a conflict. If there is not
conflict between the subsystem tree and the creds tree, then it doesn't
matter if the patch is in both trees or not.
--
Cheers,
Stephen Rothwell sfr@canb.auug.org.au
http://www.canb.auug.org.au/~sfr/
[-- Attachment #2: Type: application/pgp-signature, Size: 197 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2008-08-27 23:21 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <20080827134541.19980.61042.stgit@warthog.procyon.org.uk>
2008-08-27 13:45 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 arch David Howells
2008-08-27 14:55 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 Artem Bityutskiy
2008-08-27 15:24 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 arch David Howells
2008-08-27 23:21 ` [PATCH 01/59] CRED: Wrap task credential accesses in the IA64 Stephen Rothwell
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox