[PATCH 0/2] smack: recognize ipv4 CIPSO w/o categories
Casey Schaufler
casey at schaufler-ca.com
Wed Feb 19 21:50:16 UTC 2025
On 1/16/2025 3:40 PM, Konstantin Andreev wrote:
> Before [1] SMACK did not recognize CIPSO w/o categories (sensitivity only)
> [1] tried to address this, but did this wrong.
>
> The 1st patch reverts [1],
> the 2nd patch addresses CIPSO w/o categories better than [1].
>
> [1] https://lore.kernel.org/linux-security-module/20230124105037.23108-1-arefev@swemel.ru/
> ccfd889acb06 ("smackfs: Added check catlen") 2023-01-24
>
> Konstantin Andreev (2):
> smack: Revert "smackfs: Added check catlen"
> smack: recognize ipv4 CIPSO w/o categories
I have accepted these patches. They are in smack-next.
>
> security/smack/smackfs.c | 21 +++++++--------------
> 1 file changed, 7 insertions(+), 14 deletions(-)
>
More information about the Linux-security-module-archive
mailing list