lwn.git/security/selinux/ss/policydb.c, branch v4.17-rc7

selinux: update my email address

2017-08-17T19:32:55+00:00

Update my email address since epoch.ncsc.mil no longer exists. MAINTAINERS and CREDITS are already correct. Signed-off-by: Stephen Smalley Signed-off-by: Paul Moore

selinux: Create policydb version for Infiniband support

2017-05-23T16:27:32+00:00

Support for Infiniband requires the addition of two new object contexts, one for infiniband PKeys and another IB Ports. Added handlers to read and write the new ocontext types when reading or writing a binary policy representation. Signed-off-by: Daniel Jurgens Reviewed-by: Eli Cohen Reviewed-by: James Morris Acked-by: Doug Ledford Signed-off-by: Paul Moore

selinux: Return directly after a failed memory allocation in policydb_index()

2017-05-23T14:23:12+00:00

Replace five goto statements (and previous variable assignments) by direct returns after a memory allocation failure in this function. Signed-off-by: Markus Elfring Signed-off-by: Paul Moore

selinux: Fix an uninitialized variable bug

2017-03-31T19:16:18+00:00

We removed this initialization as a cleanup but it is probably required. The concern is that "nel" can be zero. I'm not an expert on SELinux code but I think it looks possible to write an SELinux policy which triggers this bug. GCC doesn't catch this, but my static checker does. Fixes: 9c312e79d6af ("selinux: Delete an unnecessary variable initialisation in range_read()") Signed-off-by: Dan Carpenter Acked-by: Stephen Smalley Signed-off-by: Paul Moore

selinux: Return directly after a failed kzalloc() in roles_init()

2017-03-29T15:39:17+00:00