[PATCH v2 0/2] smack: fix two bugs in setting task label

Konstantin Andreev andreev at swemel.ru
Sat Mar 15 01:57:12 UTC 2025


These two patches have distinct subjects,
but work on the same object,
  security/smack/smack_lsm.c`do_setattr()
and the second patch partially overwrites first,
so I combine them in a series.

v2: see individual patches

Konstantin Andreev (2):
  smack: fix bug: unprivileged task can create labels
  smack: fix bug: setting task label silently ignores input garbage

 Documentation/admin-guide/LSM/Smack.rst |  11 ++-
 security/smack/smack.h                  |   3 +
 security/smack/smack_access.c           |  93 ++++++++++++++-----
 security/smack/smack_lsm.c              | 118 ++++++++++++++++--------
 4 files changed, 164 insertions(+), 61 deletions(-)

-- 
2.43.0




More information about the Linux-security-module-archive mailing list