]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
netlabel: add address family checks to netlbl_{sock,req}_delattr()
authorPaul Moore <paul@paul-moore.com>
Mon, 6 Jun 2016 19:17:20 +0000 (15:17 -0400)
committerPaul Moore <paul@paul-moore.com>
Mon, 6 Jun 2016 19:17:20 +0000 (15:17 -0400)
commit0e0e36774081534783aa8eeb9f6fbddf98d3c061
treec773e3db77e120826b2a0902786f5c8ef3cdc918
parent7ea59202db8d20806d9ae552acd1875c3a978bcc
netlabel: add address family checks to netlbl_{sock,req}_delattr()

It seems risky to always rely on the caller to ensure the socket's
address family is correct before passing it to the NetLabel kAPI,
especially since we see at least one LSM which didn't. Add address
family checks to the *_delattr() functions to help prevent future
problems.

Cc: <stable@vger.kernel.org>
Reported-by: Maninder Singh <maninder1.s@samsung.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
net/netlabel/netlabel_kapi.c