linux-stable/security/smack
Paul Moore 41c3bd2039 netlabel: fix a problem when setting bits below the previously lowest bit
The NetLabel category (catmap) functions have a problem in that they
assume categories will be set in an increasing manner, e.g. the next
category set will always be larger than the last.  Unfortunately, this
is not a valid assumption and could result in problems when attempting
to set categories less than the startbit in the lowest catmap node.
In some cases kernel panics and other nasties can result.

This patch corrects the problem by checking for this and allocating a
new catmap node instance and placing it at the front of the list.

Cc: stable@vger.kernel.org
Reported-by: Christian Evans <frodox@zoho.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>
Tested-by: Casey Schaufler <casey@schaufler-ca.com>
2014-08-01 11:17:03 -04:00
..
Kconfig Smack: use select not depends in Kconfig 2012-12-14 10:57:10 -08:00
Makefile Smack: Simplified Mandatory Access Control Kernel 2008-02-05 09:44:20 -08:00
smack.h Smack: Make the syslog control configurable 2013-12-23 15:50:55 -08:00
smack_access.c netlabel: fix a problem when setting bits below the previously lowest bit 2014-08-01 11:17:03 -04:00
smack_lsm.c Merge git://git.infradead.org/users/eparis/audit 2014-01-23 18:08:10 -08:00
smackfs.c Smack: change rule cap check 2013-12-23 15:57:43 -08:00