[PATCH 0/2] smack: restrict smackfs/{direct,mapped} values to 0-255

Konstantin Andreev andreev at swemel.ru
Sun May 24 22:37:47 UTC 2026


Both smackfs/direct and smackfs/mapped incorrectly accept
the full range of integer values.

2nd patch restricts range.
1st patch deduplicates file_operations code
to apply the fix in a single place

The patch set applies on top of:
https://github.com/cschaufler/smack-next/commits/next
commit b78fede1c69a

Konstantin Andreev (2):
  smack: deduplicate smackfs/{direct,mapped} file_operations
  smack: restrict smackfs/{direct,mapped} values to 0-255

 security/smack/smack.h   |   5 +-
 security/smack/smackfs.c | 153 +++++++++++++--------------------------
 2 files changed, 53 insertions(+), 105 deletions(-)

-- 
2.47.3




More information about the Linux-security-module-archive mailing list