linux-kernel - [GIT PULL] SELinux fixes for v4.20 (#1)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAHC9VhRWJ2s+z3TYazcgb6e2mkYuvD4Hy5W-N8i4Qo9Rn_8SeA@mail.gmail.com>
Date:   Thu, 15 Nov 2018 08:02:47 -0500
From:   Paul Moore <paul@...l-moore.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     selinux@...r.kernel.org, linux-security-module@...r.kernel.org,
        linux-kernel@...r.kernel.org
Subject: [GIT PULL] SELinux fixes for v4.20 (#1)

Hi Linus,

Two small SELinux fixes for v4.20; Ondrej's patch adds a check on user
input, and my patch ensures we don't look past the end of a buffer.
Both patches are quite small and pass the selinux-testsuite, please
merge them into the next v4.20-rc.

Thanks,
-Paul

--
The following changes since commit 4458bba09788e70e8fb39ad003f087cd9dfbd6ac:

 selinux: Add __GFP_NOWARN to allocation at str_read()
   (2018-09-13 15:36:25 -0400)

are available in the Git repository at:

 git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux.git
   tags/selinux-pr-20181115

for you to fetch changes up to 877181a8d9dc663f7a73f77f50af714d7888ec3b:

 selinux: fix non-MLS handling in mls_context_to_sid()
   (2018-11-13 21:44:33 -0500)

----------------------------------------------------------------
selinux/stable-4.20 PR 20181115

----------------------------------------------------------------
Ondrej Mosnacek (1):
     selinux: check length properly in SCTP bind hook

Paul Moore (1):
     selinux: fix non-MLS handling in mls_context_to_sid()

security/selinux/hooks.c  |  3 +++
security/selinux/ss/mls.c | 10 +++++++---
2 files changed, 10 insertions(+), 3 deletions(-)

-- 
paul moore
www.paul-moore.com