]> www.infradead.org Git - users/jedix/linux-maple.git/commit
landlock: Log the TGID of the domain creator
authorMickaël Salaün <mic@digikod.net>
Thu, 10 Apr 2025 17:17:21 +0000 (19:17 +0200)
committerMickaël Salaün <mic@digikod.net>
Fri, 11 Apr 2025 10:53:17 +0000 (12:53 +0200)
commit4767af82a08ffaa5e55fe71febfa8cdef201b620
treeba957e30ce8ee895c568fd4225da1ceb6dc8c0f8
parentfe81536af3978f26a1383e4da7f135b973eb4209
landlock: Log the TGID of the domain creator

As for other Audit's "pid" fields, Landlock should use the task's TGID
instead of its TID.  Fix this issue by keeping a reference to the TGID
of the domain creator.

Existing tests already check for the PID but only with the thread group
leader, so always the TGID.  A following patch adds dedicated tests for
non-leader thread.

Remove the current_real_cred() check which does not make sense because
we only reference a struct pid, whereas a previous version did reference
a struct cred instead.

Cc: Christian Brauner <brauner@kernel.org>
Cc: Paul Moore <paul@paul-moore.com>
Reviewed-by: Günther Noack <gnoack3000@gmail.com>
Link: https://lore.kernel.org/r/20250410171725.1265860-1-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>
security/landlock/domain.c