You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Paris cea78dc4ca SELinux: fix off by 1 reference of class_to_string in context_struct_compute_av ... The class_to_string array is referenced by tclass. My code mistakenly was using tclass - 1. If the proceeding class is a userspace class rather than kernel class this may cause a denial/EINVAL even if unknown handling is set to allow. The bug shouldn't be allowing excess privileges since those are given based on the contents of another array which should be correctly referenced. At this point in time its pretty unlikely this is going to cause problems. The most recently added kernel classes which could be affected are association, dccp_socket, and peer. Its pretty unlikely any policy with handle_unknown=allow doesn't have association and dccp_socket undefined (they've been around longer than unknown handling) and peer is conditionalized on a policy cap which should only be defined if that class exists in policy. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>		17 years ago
..
keys	keys: remove unused key_alloc_sem	17 years ago
selinux	SELinux: fix off by 1 reference of class_to_string in context_struct_compute_av	17 years ago
smack	Security: split proc ptrace checking into read vs. attach	17 years ago
Kconfig	…
Makefile	cgroups: implement device whitelist	17 years ago
capability.c	capabilities: implement per-process securebits	17 years ago
commoncap.c	Security: split proc ptrace checking into read vs. attach	17 years ago
device_cgroup.c	devcgroup: fix permission check when adding entry to child cgroup	17 years ago
dummy.c	Security: split proc ptrace checking into read vs. attach	17 years ago
inode.c	…
root_plug.c	root_plug: use cap_task_prctl	17 years ago
security.c	Security: split proc ptrace checking into read vs. attach	17 years ago