• Linus Torvalds's avatar
    Merge tag 'kallsyms_show_value-v5.8-rc5' of... · ce69fb3b
    Linus Torvalds authored
    Merge tag 'kallsyms_show_value-v5.8-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
    
    Pull kallsyms fix from Kees Cook:
     "Refactor kallsyms_show_value() users for correct cred.
    
      I'm not delighted by the timing of getting these changes to you, but
      it does fix a handful of kernel address exposures, and no one has
      screamed yet at the patches.
    
      Several users of kallsyms_show_value() were performing checks not
      during "open". Refactor everything needed to gain proper checks
      against file->f_cred for modules, kprobes, and bpf"
    
    * tag 'kallsyms_show_value-v5.8-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:
      selftests: kmod: Add module address visibility test
      bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok()
      kprobes: Do not expose probe addresses to non-CAP_SYSLOG
      module: Do not expose section addresses to non-CAP_SYSLOG
      module: Refactor section attr into bin attribute
      kallsyms: Refactor kallsyms_show_value() to take cred
    ce69fb3b
module.c 116 KB