tree 68115d5b3adbcaf99f291bc20efe5906ae44ed9e
parent 270e84a1e6effd6c0c6e9b13b196b5fdaa392954
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1484653541 -0500
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1489297304 +0100

ima: fix ima_d_path() possible race with rename

commit bc15ed663e7e53ee4dc3e60f8d09c93a0528c694 upstream.

On failure to return a pathname from ima_d_path(), a pointer to
dname is returned, which is subsequently used in the IMA measurement
list, the IMA audit records, and other audit logging.  Saving the
pointer to dname for later use has the potential to race with rename.

Intead of returning a pointer to dname on failure, this patch returns
a pointer to a copy of the filename.

Reported-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>