]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit
netlabel: add address family checks to netlbl_{sock,req}_delattr()
authorPaul Moore <paul@paul-moore.com>
Mon, 6 Jun 2016 19:17:20 +0000 (15:17 -0400)
committerKamal Mostafa <kamal@canonical.com>
Mon, 22 Aug 2016 14:42:41 +0000 (07:42 -0700)
commit243f8e01ab64df8d70eb8e92f497fff49b0f94d2
tree93eb4ad098ca5482248ccb4eeb474c71a76d47bb
parent96d0be9d75d69c79389abffc3e394261e38759cb
netlabel: add address family checks to netlbl_{sock,req}_delattr()

BugLink: http://bugs.launchpad.net/bugs/1615620
commit 0e0e36774081534783aa8eeb9f6fbddf98d3c061 upstream.

It seems risky to always rely on the caller to ensure the socket's
address family is correct before passing it to the NetLabel kAPI,
especially since we see at least one LSM which didn't. Add address
family checks to the *_delattr() functions to help prevent future
problems.

Reported-by: Maninder Singh <maninder1.s@samsung.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
net/netlabel/netlabel_kapi.c