Re: [PATCH] selinux: fix incorrect execmem checks on overlayfs
Paul Moore <[email protected]>
| Newsgroups | org.kernel.vger.selinux |
|---|---|
| Message-ID | <CAHC9VhROJVpe7w8eM4oxtCQ8=BdtEEZVSTvTJv0BsWG6jzHHAw@mail.gmail.com> |
On Tue, Jul 7, 2026 at 11:50 AM Stephen Smalley <[email protected]> wrote: > On Fri, Jul 3, 2026 at 7:47 AM Ondrej Mosnacek <[email protected]> wrote: > > > > The commit fixing the overlayfs mmap() and mprotect() access checks > > failed to skip the execmem check in __file_map_prot_check() for the case > > where the "mounter check" is being performed ... > > Sashiko noted a possible pre-existing issue in our code regarding how > we are testing for anonymous mappings: > https://lore.kernel.org/selinux/[email protected]/T/#t > which we may want to investigate separately but for this patch: Ondrej, please look into the anonymous mapping issue in a separate patch. -- paul-moore.com