ima: Avoid blocking in RCU read-side critical section
A panic happens in ima_match_policy: BUG: unable to handle kernel NULL pointer dereference at 0000000000000010 PGD 42f873067 P4D 0 Oops: 0000 [#1] SMP NOPTI CPU: 5 PID: 1286325 Comm: kubeletmonit.sh Kdump: loaded Tainted: P Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.0.0 02/06/2015 RIP: 0010:ima_match_policy+0x84/0x450 Code: 49 89 fc 41 89 cf 31 ed 89 44 24 14 eb 1c 44 39 7b 18 74 26 41 83 ff 05 74 20 48 8b 1b 48 3b 1d f2 b9 f4 00 0f 84 9c 01 00 00 <44> 85 73 10 74 ea 44 8b 6b 14 41 f6 c5 01 75 d4 41 f6 c5 02 74 0f RSP: 0018:ff71570009e07a80 EFLAGS: 00010207 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000200 RDX: ffffffffad8dc7c0 RSI: 0000000024924925 RDI: ff3e27850dea2000 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffffabfce739 R10: ff3e27810cc42400 R11: 0000000000000000 R12: ff3e2781825ef970 R13: 00000000ff3e2785 R14: 000000000000000c R15: 0000000000000001 FS: 00007f5195b517...
Showing
- include/linux/lsm_hook_defs.h 1 addition, 1 deletioninclude/linux/lsm_hook_defs.h
- include/linux/security.h 3 additions, 2 deletionsinclude/linux/security.h
- kernel/auditfilter.c 3 additions, 2 deletionskernel/auditfilter.c
- security/apparmor/audit.c 3 additions, 3 deletionssecurity/apparmor/audit.c
- security/apparmor/include/audit.h 1 addition, 1 deletionsecurity/apparmor/include/audit.h
- security/integrity/ima/ima.h 1 addition, 1 deletionsecurity/integrity/ima/ima.h
- security/integrity/ima/ima_policy.c 9 additions, 6 deletionssecurity/integrity/ima/ima_policy.c
- security/security.c 4 additions, 2 deletionssecurity/security.c
- security/selinux/include/audit.h 3 additions, 1 deletionsecurity/selinux/include/audit.h
- security/selinux/ss/services.c 3 additions, 2 deletionssecurity/selinux/ss/services.c
- security/smack/smack_lsm.c 3 additions, 1 deletionsecurity/smack/smack_lsm.c
Please register or sign in to comment