diff options
| author | Christian Göttsche <cgzones@googlemail.com> | 2026-09-28 18:52:52 +0200 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2026-09-30 16:59:44 -0400 |
| commit | b73b967b0fc44707f39faa4f298f1f9d9b7bfac5 (patch) | |
| tree | a5b3e5f67a6d047cbe4dd36ef4ae53d551310e44 /include/linux/timerqueue.h | |
| parent | 167d70651df872adcb37ab8317b837eb3a47d824 (diff) | |
| download | linux-next-b73b967b0fc44707f39faa4f298f1f9d9b7bfac5.tar.gz linux-next-b73b967b0fc44707f39faa4f298f1f9d9b7bfac5.zip | |
selinux: validate permissive and neveraudit map types at load
The permissive and neveraudit maps are read as ebitmaps and indexed by
type value, but their set bits are never checked. A bit that is not a
defined, non-attribute type is silently accepted. Validate every set bit
of both maps in policydb_index() with policydb_simpletype_isvalid().
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions