Skip to content

Commit

Permalink
Add in_execve flag into task_struct.
Browse files Browse the repository at this point in the history
This patch allows LSM modules to determine whether current process is in an
execve operation or not so that they can behave differently while an execve
operation is in progress.

This patch is needed by TOMOYO. Please see another patch titled "LSM adapter
functions." for backgrounds.

Signed-off-by: Tetsuo Handa <[email protected]>
Signed-off-by: David Howells <[email protected]>
Signed-off-by: James Morris <[email protected]>
takedakn authored and James Morris committed Feb 12, 2009
1 parent 523979a commit f9ce1f1
Showing 3 changed files with 8 additions and 0 deletions.
3 changes: 3 additions & 0 deletions fs/compat.c
Original file line number Diff line number Diff line change
@@ -1402,6 +1402,7 @@ int compat_do_execve(char * filename,
retval = mutex_lock_interruptible(&current->cred_exec_mutex);
if (retval < 0)
goto out_free;
current->in_execve = 1;

retval = -ENOMEM;
bprm->cred = prepare_exec_creds();
@@ -1454,6 +1455,7 @@ int compat_do_execve(char * filename,
goto out;

/* execve succeeded */
current->in_execve = 0;
mutex_unlock(&current->cred_exec_mutex);
acct_update_integrals(current);
free_bprm(bprm);
@@ -1470,6 +1472,7 @@ int compat_do_execve(char * filename,
}

out_unlock:
current->in_execve = 0;
mutex_unlock(&current->cred_exec_mutex);

out_free:
3 changes: 3 additions & 0 deletions fs/exec.c
Original file line number Diff line number Diff line change
@@ -1278,6 +1278,7 @@ int do_execve(char * filename,
retval = mutex_lock_interruptible(&current->cred_exec_mutex);
if (retval < 0)
goto out_free;
current->in_execve = 1;

retval = -ENOMEM;
bprm->cred = prepare_exec_creds();
@@ -1331,6 +1332,7 @@ int do_execve(char * filename,
goto out;

/* execve succeeded */
current->in_execve = 0;
mutex_unlock(&current->cred_exec_mutex);
acct_update_integrals(current);
free_bprm(bprm);
@@ -1349,6 +1351,7 @@ int do_execve(char * filename,
}

out_unlock:
current->in_execve = 0;
mutex_unlock(&current->cred_exec_mutex);

out_free:
2 changes: 2 additions & 0 deletions include/linux/sched.h
Original file line number Diff line number Diff line change
@@ -1158,6 +1158,8 @@ struct task_struct {
/* ??? */
unsigned int personality;
unsigned did_exec:1;
unsigned in_execve:1; /* Tell the LSMs that the process is doing an
* execve */
pid_t pid;
pid_t tgid;

0 comments on commit f9ce1f1

Please sign in to comment.