1
linux/security/selinux
Joshua Roys c36f74e67f netlabel: fix export of SELinux categories > 127
This fixes corrupted CIPSO packets when SELinux categories greater than 127
are used.  The bug occured on the second (and later) loops through the
while; the inner for loop through the ebitmap->maps array used the same
index as the NetLabel catmap->bitmap array, even though the NetLabel bitmap
is twice as long as the SELinux bitmap.

Signed-off-by: Joshua Roys <joshua.roys@gtri.gatech.edu>
Acked-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
2010-02-25 17:49:20 +11:00
..
include selinux: generate flask headers during kernel build 2009-10-07 21:56:44 +11:00
ss netlabel: fix export of SELinux categories > 127 2010-02-25 17:49:20 +11:00
.gitignore SELinux: add .gitignore files for dynamic classes 2009-10-24 09:42:27 +08:00
avc.c SELinux: print denials for buggy kernel with unknown perms 2009-11-24 14:30:49 +11:00
exports.c Creds: creds->security can be NULL is selinux is disabled 2009-09-14 12:34:07 +10:00
hooks.c SECURITY: selinux, fix update_rlimit_cpu parameter 2010-01-04 11:27:18 +01:00
Kconfig
Makefile selinux: generate flask headers during kernel build 2009-10-07 21:56:44 +11:00
netif.c
netlabel.c tree-wide: fix assorted typos all over the place 2009-12-04 15:39:55 +01:00
netlink.c
netnode.c
netport.c
nlmsgtab.c
selinuxfs.c selinux: dynamic class/perm discovery 2009-10-07 21:56:42 +11:00
xfrm.c SELinux: Convert avc_audit to use lsm_audit.h 2009-08-17 08:37:18 +10:00