mirror of
https://github.com/Qortal/Brooklyn.git
synced 2025-01-31 07:12:18 +00:00
2a709f28fa
* 0day explit mitigation * Memory corruption prevention * Privilege escalation prevention * Buffer over flow prevention * File System corruption defense * Thread escape prevention This may very well be the most intensive inclusion to BrooklynR. This will not be part of an x86 suite nor it will be released as tool kit. The security core toolkit will remain part of kernel base.
79 lines
2.2 KiB
C
79 lines
2.2 KiB
C
#include <linux/kernel.h>
|
|
#include <linux/sched.h>
|
|
#include <linux/file.h>
|
|
#include <linux/fs.h>
|
|
#include <linux/grinternal.h>
|
|
|
|
extern int gr_acl_tpe_check(void);
|
|
|
|
int
|
|
gr_tpe_allow(const struct file *file)
|
|
{
|
|
#ifdef CONFIG_GRKERNSEC
|
|
struct inode *inode = d_backing_inode(file->f_path.dentry->d_parent);
|
|
struct inode *file_inode = d_backing_inode(file->f_path.dentry);
|
|
const struct cred *cred = current_cred();
|
|
char *msg = NULL;
|
|
char *msg2 = NULL;
|
|
|
|
// never restrict root
|
|
if (gr_is_global_root(cred->uid))
|
|
return 1;
|
|
|
|
if (grsec_enable_tpe) {
|
|
#ifdef CONFIG_GRKERNSEC_TPE_INVERT
|
|
if (grsec_enable_tpe_invert && !in_group_p(grsec_tpe_gid))
|
|
msg = "not being in trusted group";
|
|
else if (!grsec_enable_tpe_invert && in_group_p(grsec_tpe_gid))
|
|
msg = "being in untrusted group";
|
|
#else
|
|
if (in_group_p(grsec_tpe_gid))
|
|
msg = "being in untrusted group";
|
|
#endif
|
|
}
|
|
if (!msg && gr_acl_tpe_check())
|
|
msg = "being in untrusted role";
|
|
|
|
// not in any affected group/role
|
|
if (!msg)
|
|
goto next_check;
|
|
|
|
if (gr_is_global_nonroot(inode->i_uid))
|
|
msg2 = "file in non-root-owned directory";
|
|
else if (inode->i_mode & S_IWOTH)
|
|
msg2 = "file in world-writable directory";
|
|
else if ((inode->i_mode & S_IWGRP) && gr_is_global_nonroot_gid(inode->i_gid))
|
|
msg2 = "file in group-writable directory";
|
|
else if (file_inode->i_mode & S_IWOTH)
|
|
msg2 = "file is world-writable";
|
|
|
|
if (msg && msg2) {
|
|
char fullmsg[70] = {0};
|
|
snprintf(fullmsg, sizeof(fullmsg)-1, "%s and %s", msg, msg2);
|
|
gr_log_str_fs(GR_DONT_AUDIT, GR_EXEC_TPE_MSG, fullmsg, file->f_path.dentry, file->f_path.mnt);
|
|
return 0;
|
|
}
|
|
msg = NULL;
|
|
next_check:
|
|
#ifdef CONFIG_GRKERNSEC_TPE_ALL
|
|
if (!grsec_enable_tpe || !grsec_enable_tpe_all)
|
|
return 1;
|
|
|
|
if (gr_is_global_nonroot(inode->i_uid) && !uid_eq(inode->i_uid, cred->uid))
|
|
msg = "directory not owned by user";
|
|
else if (inode->i_mode & S_IWOTH)
|
|
msg = "file in world-writable directory";
|
|
else if ((inode->i_mode & S_IWGRP) && gr_is_global_nonroot_gid(inode->i_gid))
|
|
msg = "file in group-writable directory";
|
|
else if (file_inode->i_mode & S_IWOTH)
|
|
msg = "file is world-writable";
|
|
|
|
if (msg) {
|
|
gr_log_str_fs(GR_DONT_AUDIT, GR_EXEC_TPE_MSG, msg, file->f_path.dentry, file->f_path.mnt);
|
|
return 0;
|
|
}
|
|
#endif
|
|
#endif
|
|
return 1;
|
|
}
|