kernel-ark/security/selinux
Stephen Smalley b1aa5301b9 selinux: fix labeling of /proc/net inodes
The proc net rewrite had a side effect on selinux, leading it to mislabel
the /proc/net inodes, thereby leading to incorrect denials.  Fix
security_genfs_sid to ignore extra leading / characters in the path supplied
by selinux_proc_get_sid since we now get "//net/..." rather than "/net/...".

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
2008-01-26 12:16:16 +11:00
..
include Security: add get, set, and cloning of superblock security information 2008-01-25 11:29:46 +11:00
ss selinux: fix labeling of /proc/net inodes 2008-01-26 12:16:16 +11:00
avc.c SELinux: Improve read/write performance 2007-10-17 08:59:31 +10:00
exports.c
hooks.c security: add a secctx_to_secid() hook 2008-01-25 11:29:53 +11:00
Kconfig Fix trivial typos in Kconfig* files 2007-05-09 07:12:20 +02:00
Makefile SELinux: extract the NetLabel SELinux support from the security server 2007-04-26 01:35:48 -04:00
netif.c [NET]: Make device event notification network namespace safe 2007-10-10 16:49:09 -07:00
netlabel.c selinux: fix memory leak in netlabel code 2008-01-22 09:31:00 +11:00
netlink.c [NET]: Support multiple network namespaces with netlink 2007-10-10 16:49:09 -07:00
nlmsgtab.c Audit: add TTY input auditing 2007-07-16 09:05:47 -07:00
selinuxfs.c security/selinux: constify function pointer tables and fields 2008-01-25 11:29:54 +11:00
xfrm.c SELinux: suppress a warning for 64k pages. 2007-11-08 08:55:04 +11:00