[PATCH 0/2] smack: recognize ipv4 CIPSO w/o categories
Konstantin Andreev
andreev at swemel.ru
Thu Jan 16 23:40:32 UTC 2025
Before [1] SMACK did not recognize CIPSO w/o categories (sensitivity only)
[1] tried to address this, but did this wrong.
The 1st patch reverts [1],
the 2nd patch addresses CIPSO w/o categories better than [1].
[1] https://lore.kernel.org/linux-security-module/20230124105037.23108-1-arefev@swemel.ru/
ccfd889acb06 ("smackfs: Added check catlen") 2023-01-24
Konstantin Andreev (2):
smack: Revert "smackfs: Added check catlen"
smack: recognize ipv4 CIPSO w/o categories
security/smack/smackfs.c | 21 +++++++--------------
1 file changed, 7 insertions(+), 14 deletions(-)
--
2.43.0
More information about the Linux-security-module-archive
mailing list