| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <b764863b-6111-45ee-8364-66a4ca7e5d59@schaufler-ca.com> Date: Fri, 7 Jun 2024 11:50:10 -0700 From: Casey Schaufler <casey@...aufler-ca.com> To: Ondrej Mosnacek <omosnace@...hat.com>, Paul Moore <paul@...l-moore.com> Cc: netdev@...r.kernel.org, linux-security-module@...r.kernel.org, Casey Schaufler <casey@...aufler-ca.com> Subject: Re: [PATCH v2 0/2] cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options On 6/7/2024 9:07 AM, Ondrej Mosnacek wrote: > This series aims to improve cipso_v4_skbuff_delattr() to fully > remove the CIPSO options instead of just clearing them with NOPs. > That is implemented in the second patch, while the first patch is > a bugfix for cipso_v4_delopt() that the second patch depends on. > > Tested using selinux-testsuite a TMT/Beakerlib test from this PR: > https://src.fedoraproject.org/tests/selinux/pull-request/488 Smack also uses CIPSO. The Smack testsuite is: https://github.com/smack-team/smack-testsuite.git > > Changes in v2: > - drop the paranoid WARN_ON() usage > - reword the description of the second patch > > v1: https://lore.kernel.org/linux-security-module/20240416152913.1527166-1-omosnace@redhat.com/ > > Ondrej Mosnacek (2): > cipso: fix total option length computation > cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options > > net/ipv4/cipso_ipv4.c | 75 +++++++++++++++++++++++++++++++------------ > 1 file changed, 54 insertions(+), 21 deletions(-) >
Powered by blists - more mailing lists