From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752621AbYKLQLV (ORCPT ); Wed, 12 Nov 2008 11:11:21 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1750873AbYKLQLH (ORCPT ); Wed, 12 Nov 2008 11:11:07 -0500 Received: from mx2.redhat.com ([66.187.237.31]:47087 "EHLO mx2.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750763AbYKLQLE (ORCPT ); Wed, 12 Nov 2008 11:11:04 -0500 From: Eric Paris Subject: [PATCH =-v3 04/21] fsnotify: sys_execve and sys_uselib do not call into fsnotify To: linux-kernel@vger.kernel.org, malware-list@lists.printk.net Cc: viro@zeniv.linux.org.uk, alan@lxorguk.ukuu.org.uk, arjan@infradead.org, greg@kroah.com, tytso@mit.edu, akpm@linux-foundation.org Date: Wed, 12 Nov 2008 11:10:47 -0500 Message-ID: <20081112161047.25434.58147.stgit@paris.rdu.redhat.com> In-Reply-To: <20081112161002.25434.82358.stgit@paris.rdu.redhat.com> References: <20081112161002.25434.82358.stgit@paris.rdu.redhat.com> User-Agent: StGIT/0.14.3 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org sys_execve and sys_uselib do not call into fsnotify so inotify, dnotify, and importantly to me fanotify do not see opens on things which are going to be exectued. Create a generic fsnotify hook for these paths. Signed-off-by: Eric Paris --- fs/exec.c | 5 +++++ include/linux/fsnotify.h | 7 +++++++ 2 files changed, 12 insertions(+), 0 deletions(-) diff --git a/fs/exec.c b/fs/exec.c index 4e834f1..8f56995 100644 --- a/fs/exec.c +++ b/fs/exec.c @@ -51,6 +51,7 @@ #include #include #include +#include #include #include @@ -135,6 +136,8 @@ asmlinkage long sys_uselib(const char __user * library) if (IS_ERR(file)) goto out; + fsnotify_open_exec(file); + error = -ENOEXEC; if(file->f_op) { struct linux_binfmt * fmt; @@ -687,6 +690,8 @@ struct file *open_exec(const char *name) if (IS_ERR(file)) return file; + fsnotify_open_exec(file); + err = deny_write_access(file); if (err) { fput(file); diff --git a/include/linux/fsnotify.h b/include/linux/fsnotify.h index 3a1b0dc..bf53881 100644 --- a/include/linux/fsnotify.h +++ b/include/linux/fsnotify.h @@ -171,6 +171,13 @@ static inline void fsnotify_modify(struct file *file) } /* + * fsnotify_open_exec - file was opened by execve of uselib + */ +static inline void fsnotify_open_exec(struct file *file) +{ +} + +/* * fsnotify_open - file was opened */ static inline void fsnotify_open(struct file *file)