Doug / smarc-fsl-linux-kernel

Download as
Browse Code ยป

Commit 8f82a6880d8d03961181d973388e1df2772a8b24

Authored by Steffen Klassert
Committed by Eric Paris
1 parent 4916ca401e
Exists in master and in 7 other branches imx_3.0.35_4.1.0, imx_3.10.17_1.0.1_ga, imx_3.10.53_1.1.0_ga, imx_3.14.28_1.0.0_ga, smarc-imx_3.10.53_1.1.0_ga, smarc-imx_3.14.28_1.0.0_ga, smarc-l5.0.0_1.0.0-ga

selinux: Fix check for xfrm selinux context algorithm 

selinux_xfrm_sec_ctx_alloc accidentally checks the xfrm domain of
interpretation against the selinux context algorithm. This patch
fixes this by checking ctx_alg against the selinux context algorithm.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: Eric Paris <eparis@redhat.com>

Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff

security/selinux/xfrm.c
Diff comments   View file @ 8f82a68
... ... @@ -208,7 +208,7 @@
208 208 if (!uctx)
209 209 goto not_from_user;
210 210  
211   - if (uctx->ctx_doi != XFRM_SC_ALG_SELINUX)
  211 + if (uctx->ctx_alg != XFRM_SC_ALG_SELINUX)
212 212 return -EINVAL;
213 213  
214 214 str_len = uctx->ctx_len;