[PATCH 69/90] LSM: Use full security context in security_inode_setsecctx

Tetsuo Handa penguin-kernel at I-love.SAKURA.ne.jp
Mon Apr 22 13:13:54 UTC 2019


On 2019/04/19 9:45, Casey Schaufler wrote:
> +	hlist_for_each_entry(hp, &security_hook_heads.inode_setsecctx, list) {
> +		if (strncmp(ctx, hp->lsm, strlen(hp->lsm))) {
> +			WARN_ONCE(1, "security_inode_setsecctx form1 error\n");
> +			rc = -EINVAL;
> +			break;
> +		}

Will you avoid using WARN*() ?
Since syzbot tests using panic_on_warn == 1, this WARN_ONCE() will act as panic().



More information about the Linux-security-module-archive mailing list