]> git.baikalelectronics.ru Git - kernel.git/commit
selinux: format all invalid context as untrusted
authorRichard Guy Briggs <rgb@redhat.com>
Thu, 27 Jun 2019 16:48:01 +0000 (12:48 -0400)
committerPaul Moore <paul@paul-moore.com>
Mon, 1 Jul 2019 20:29:05 +0000 (16:29 -0400)
commit9b495bcbaeff019ac308c33deb44d1b4aee89aaa
treeba13e694ed22fbd1494bdca74db130914f5d900a
parent0b71dc6ad3f0fccb747f1655e850e8acf84dced4
selinux: format all invalid context as untrusted

The userspace tools expect all fields of the same name to be logged
consistently with the same encoding.  Since the invalid_context fields
contain untrusted strings in selinux_inode_setxattr()
and selinux_setprocattr(), encode all instances of this field the same
way as though they were untrusted even though
compute_sid_handle_invalid_context() and security_sid_mls_copy() are
trusted.

Please see github issue
https://github.com/linux-audit/audit-kernel/issues/57

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/ss/services.c