linux-stable-rt/security
Joshua Roys c36f74e67f netlabel: fix export of SELinux categories > 127
This fixes corrupted CIPSO packets when SELinux categories greater than 127
are used.  The bug occured on the second (and later) loops through the
while; the inner for loop through the ebitmap->maps array used the same
index as the NetLabel catmap->bitmap array, even though the NetLabel bitmap
is twice as long as the SELinux bitmap.

Signed-off-by: Joshua Roys <joshua.roys@gtri.gatech.edu>
Acked-by: Paul Moore <paul.moore@hp.com>
Signed-off-by: James Morris <jmorris@namei.org>
2010-02-25 17:49:20 +11:00
..
integrity/ima security: fix error return path in ima_inode_alloc 2010-02-25 07:54:33 +11:00
keys Keys: KEYCTL_SESSION_TO_PARENT needs TIF_NOTIFY_RESUME architecture support 2009-12-17 09:27:59 +11:00
selinux netlabel: fix export of SELinux categories > 127 2010-02-25 17:49:20 +11:00
smack
tomoyo Fix ACC_MODE() for real 2010-01-14 09:05:26 -05:00
Kconfig
Makefile NOMMU: Optimise away the {dac_,}mmap_min_addr tests 2009-12-17 09:25:19 +11:00
capability.c
commoncap.c
device_cgroup.c
inode.c get rid of pointless checks after simple_pin_fs() 2010-01-26 22:22:26 -05:00
lsm_audit.c
min_addr.c security/min_addr.c: make init_mmap_min_addr() static 2009-12-17 09:24:22 +11:00
security.c Take ima_file_free() to proper place. 2010-02-07 03:07:29 -05:00