Fix auditsc DoS and mark it BROKEN

Andy Lutomirski linux-audit lkml stable 2 versions May 28, 2014 – May 29, 2014 NAK

Get series with b4

b4 am [email protected]

Versions newest first · linked by author and title

#	Subject and files	Size	Replies	Applied
1/2	auditsc: audit_krule mask accesses need bounds checking`kernel/auditsc.c`	+18 -9	6 replies
2/2	audit: Mark CONFIG_AUDITSYSCALL BROKEN and update help text`init/Kconfig`	+8 -5	8 replies

No Reviewed-by, Acked-by or Tested-by trailers for v2 yet.

Cover letter [PATCH v2 0/2] Fix auditsc DoS and mark it BROKEN

CONFIG_AUDITSYSCALL is awful. Patch 2 enumerates some reasons.

Patch 1 fixes a nasty DoS and possible information leak. It should be applied and backported.

Patch 2 is optional. I leave it to other peoples' judgment.

Andy Lutomirski (2):
auditsc: audit_krule mask accesses need bounds checking
audit: Move CONFIG_AUDITSYSCALL into staging and update help text

Andy Lutomirski (2):
auditsc: audit_krule mask accesses need bounds checking
audit: Mark CONFIG_AUDITSYSCALL BROKEN and update help text

 init/Kconfig     | 13 ++++++++-----
 kernel/auditsc.c | 27 ++++++++++++++++++---------
 2 files changed, 26 insertions(+), 14 deletions(-)

Signature · 1 line

1.9.3