[PATCH 0/2] smack: fix two bugs in setting task label

Konstantin Andreev andreev at swemel.ru
Thu Mar 6 22:43:01 UTC 2025


These two patches have distinct subjects,
but work on the same object,
  security/smack/smack_lsm.c`do_setattr()
and the second patch partially overwrites first,
so I combine them in a series.

Konstantin Andreev (2):
  smack: fix bug: unprivileged task can create labels
  smack: fix bug: setting task label silently ignores input garbage

 security/smack/smack.h        |   3 +
 security/smack/smack_access.c |  93 +++++++++++++++++++++++-------
 security/smack/smack_lsm.c    | 104 ++++++++++++++++++++++------------
 3 files changed, 143 insertions(+), 57 deletions(-)

-- 
2.43.0




More information about the Linux-security-module-archive mailing list