diff options
| author | Ondrej Mosnacek <[email protected]> | 2019-06-11 08:07:19 +0000 |
|---|---|---|
| committer | Paul Moore <[email protected]> | 2019-06-11 22:35:51 +0000 |
| commit | aff7ed4851680d0d28ad9f52cd2f99213e1371b2 (patch) | |
| tree | 7cbf055d91e90dadc8116ab0da46148adb8bd1b7 /tools/perf/scripts/python/compaction-times.py | |
| parent | selinux: do not report error on connect(AF_UNSPEC) (diff) | |
| download | kernel-aff7ed4851680d0d28ad9f52cd2f99213e1371b2.tar.gz kernel-aff7ed4851680d0d28ad9f52cd2f99213e1371b2.zip | |
selinux: log raw contexts as untrusted strings
These strings may come from untrusted sources (e.g. file xattrs) so they
need to be properly escaped.
Reproducer:
# setenforce 0
# touch /tmp/test
# setfattr -n security.selinux -v 'kuřecí řízek' /tmp/test
# runcon system_u:system_r:sshd_t:s0 cat /tmp/test
(look at the generated AVCs)
Actual result:
type=AVC [...] trawcon=kuřecí řízek
Expected result:
type=AVC [...] trawcon=6B75C5996563C3AD20C599C3AD7A656B
Fixes: fede148324c3 ("selinux: log invalid contexts in AVCs")
Cc: [email protected] # v5.1+
Signed-off-by: Ondrej Mosnacek <[email protected]>
Acked-by: Richard Guy Briggs <[email protected]>
Signed-off-by: Paul Moore <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/compaction-times.py')
0 files changed, 0 insertions, 0 deletions