You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Paul Moore 6b21e1b77d netlabel: improve domain mapping validation ... The net/netlabel/netlabel_domainhash.c:netlbl_domhsh_add() function does not properly validate new domain hash entries resulting in potential problems when an administrator attempts to add an invalid entry. One such problem, as reported by Vlad Halilov, is a kernel BUG (found in netlabel_domainhash.c:netlbl_domhsh_audit_add()) when adding an IPv6 outbound mapping with a CIPSO configuration. This patch corrects this problem by adding the necessary validation code to netlbl_domhsh_add() via the newly created netlbl_domhsh_validate() function. Ideally this patch should also be pushed to the currently active -stable trees. Reported-by: Vlad Halilov <vlad.halilov@gmail.com> Signed-off-by: Paul Moore <pmoore@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>		12 years ago
..
Kconfig	…
Makefile	…
netlabel_addrlist.c	…
netlabel_addrlist.h	…
netlabel_cipso_v4.c	netlink: Rename pid to portid to avoid confusion	13 years ago
netlabel_cipso_v4.h	…
netlabel_domainhash.c	netlabel: improve domain mapping validation	12 years ago
netlabel_domainhash.h	…
netlabel_kapi.c	netlabel: use GFP flags from caller instead of GFP_ATOMIC	13 years ago
netlabel_mgmt.c	netlink: Rename pid to portid to avoid confusion	13 years ago
netlabel_mgmt.h	…
netlabel_unlabeled.c	netlabel: fix build problems when CONFIG_IPV6=n	12 years ago
netlabel_unlabeled.h	…
netlabel_user.c	userns: Convert the audit loginuid to be a kuid	13 years ago
netlabel_user.h	…