On Wed, Aug 26, 2026 at 9:23 PM Bradley Morgan <[email protected]> wrote: > On 27 August 2026 02:22:17 BST, Paul Moore <[email protected]> wrote: > >On Wed, Aug 26, 2026 at 9:06 PM Bradley Morgan <[email protected]> > >wrote: > >> On 27 August 2026 01:50:45 BST, syzbot > >> <[email protected]> wrote: > >> >Hello, > >> > > >> >syzbot found the following issue on: > >> > >> #syz set subsystems security: > >> > >> Note: here's my suggested fix, in security/ima_appraise.c > >> > >> path = dentry_path(dentry, pathbuf, PATH_MAX); > >> +if (IS_ERR(path)) > >> path = NULL; > >> > >> apparmor and tomoyo both IS_ERR check their dentry_path calls, ima > >> is the only one that doesnt. NULL fname is already handled by the audit > >> side > > > >Thanks for taking a look Bradley. Adding Mimi, Roberto, and the > >linux-integrity list as the security/integrity/ima/ima_appraise.c file > >is their domain. > > np man, do you want me to submit a patch for it? or nahhhh
That's a question for Mimi and Roberto, but if you can put together a patch without too much effort it definitely couldn't hurt to post it (make sure you post it to linux-integrity). -- paul-moore.com
