public inbox for stable@vger.kernel.org
 help / color / mirror / Atom feed
From: Greg KH <greg@kroah.com>
To: Ovidiu Panait <ovidiu.panait@windriver.com>
Cc: stable@vger.kernel.org, tj@kernel.org, mkoutny@suse.com
Subject: Re: [PATCH 5.4 0/6] cgroup: backports for CVE-2021-4197
Date: Thu, 14 Apr 2022 12:32:56 +0200	[thread overview]
Message-ID: <Ylf4WEClP0O9nRLm@kroah.com> (raw)
In-Reply-To: <20220414084450.2728917-1-ovidiu.panait@windriver.com>

On Thu, Apr 14, 2022 at 11:44:44AM +0300, Ovidiu Panait wrote:
> Backport summary
> ----------------
> 1756d7994ad8 ("cgroup: Use open-time credentials for process migraton perm checks")
> 	* Cherry pick from 5.10-stable with minor contextual adjustments.
> 
> 0d2b5955b362 ("cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv")
> 	* Cherry-pick from 5.10-stable, no modifications.
> 
> e57457641613 ("cgroup: Use open-time cgroup namespace for process migration perm checks")
> 	* Cherry-pick from 5.10-stable.
> 	* Backport to 5.4: drop changes to cgroup_attach_permissions() and
> 	  cgroup_css_set_fork() as the two functions are not present. Also,
> 	  adjust cgroup_procs_write_permission() callsites directly in
> 	  cgroup_procs_write() and cgroup_threads_write().
> 
> b09c2baa5634 ("selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644")
> 	* Clean cherry-pick.
> 
> 613e040e4dc2 ("selftests: cgroup: Test open-time credential usage for migration checks")
> 	* Minor contextual adjustments.
> 
> bf35a7879f1d ("selftests: cgroup: Test open-time cgroup namespace usage for migration checks")
> 	* Minor contextual adjustments and added wait.h
> 	  and fcntl.h includes to fix compilation.

All now queued up, thanks!


greg k-h

      parent reply	other threads:[~2022-04-14 10:33 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-04-14  8:44 [PATCH 5.4 0/6] cgroup: backports for CVE-2021-4197 Ovidiu Panait
2022-04-14  8:44 ` [PATCH 5.4 1/6] cgroup: Use open-time credentials for process migraton perm checks Ovidiu Panait
2022-04-14  8:44 ` [PATCH 5.4 2/6] cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv Ovidiu Panait
2022-04-14  8:44 ` [PATCH 5.4 3/6] cgroup: Use open-time cgroup namespace for process migration perm checks Ovidiu Panait
2022-04-14  8:44 ` [PATCH 5.4 4/6] selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 Ovidiu Panait
2022-04-14  8:44 ` [PATCH 5.4 5/6] selftests: cgroup: Test open-time credential usage for migration checks Ovidiu Panait
2022-04-14  8:44 ` [PATCH 5.4 6/6] selftests: cgroup: Test open-time cgroup namespace " Ovidiu Panait
2022-04-14 10:32 ` Greg KH [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=Ylf4WEClP0O9nRLm@kroah.com \
    --to=greg@kroah.com \
    --cc=mkoutny@suse.com \
    --cc=ovidiu.panait@windriver.com \
    --cc=stable@vger.kernel.org \
    --cc=tj@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox