Passion,Zhao 42c2a23f5d Smack: Fix the bug smackcipso can't set CIPSO correctly ...

commit 0fcfee61d6 upstream.

Bug report: https://tizendev.org/bugs/browse/TDIS-3891

The reason is userspace libsmack only use "smackfs/cipso2" long-label interface,
but the code's logical is still for orginal fixed length label. Now update
smack_cipso_apply() to support flexible label (<=256 including tailing '\0')

There is also a bug in kernel/security/smack/smackfs.c:
When smk_set_cipso() parsing the CIPSO setting from userspace, the offset of
CIPSO level should be "strlen(label)+1" instead of "strlen(label)"

Signed-off-by: Passion,Zhao <passion.zhao@intel.com>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>

2013-10-09 08:29:10 -07:00

..

Kconfig

Smack: use select not depends in Kconfig

2012-12-14 10:57:10 -08:00

Makefile

Smack: Simplified Mandatory Access Control Kernel

2008-02-05 09:44:20 -08:00

smack_access.c

Smack: onlycap limits on CAP_MAC_ADMIN

2012-07-13 15:49:23 -07:00

smack_lsm.c

consitify do_mount() arguments

2012-10-11 20:02:04 -04:00

smack.h

Smack: onlycap limits on CAP_MAC_ADMIN

2012-07-13 15:49:23 -07:00

smackfs.c

Smack: Fix the bug smackcipso can't set CIPSO correctly

2013-10-09 08:29:10 -07:00