security: fix the key_permission LSM hook function type
authorSami Tolvanen <samitolvanen@google.com>
Mon, 15 Jun 2020 18:12:32 +0000 (11:12 -0700)
committerJames Morris <jmorris@namei.org>
Mon, 22 Jun 2020 17:36:25 +0000 (10:36 -0700)
commit4bc799dcb67066e0531004d5bdbe755bb02b5488
treee36e77d8dbe7b3707c43bbc7582fa3f295d60e20
parent48778464bb7d346b47157d21ffde2af6b2d39110
security: fix the key_permission LSM hook function type

Commit 8c0637e950d6 ("keys: Make the KEY_NEED_* perms an enum rather than
a mask") changed the type of the key_permission callback functions, but
didn't change the type of the hook, which trips indirect call checking with
Control-Flow Integrity (CFI). This change fixes the issue by changing the
hook type to match the functions.

Fixes: 8c0637e950d6 ("keys: Make the KEY_NEED_* perms an enum rather than a mask")
Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <jmorris@namei.org>
include/linux/lsm_hook_defs.h