Paul Moore 0e44cd879b selinux: ensure we cleanup the internal AVC counters on error in avc_insert() ...

[ Upstream commit d8db60cb23 ]

Fix avc_insert() to call avc_node_kill() if we've already allocated
an AVC node and the code fails to insert the node in the cache.

Fixes: fa1aa143ac ("selinux: extended permissions for ioctls")
Reported-by: rsiddoji@codeaurora.org
Suggested-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-02-24 08:36:34 +01:00

..

apparmor

apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock

2020-01-09 10:20:00 +01:00

integrity

…

keys

…

loadpin

…

lockdown

…

safesetid

…

selinux

selinux: ensure we cleanup the internal AVC counters on error in avc_insert()

2020-02-24 08:36:34 +01:00

smack

broken ping to ipv6 linklocal addresses on debian buster

2020-02-11 04:35:43 -08:00

tomoyo

tomoyo: Use atomic_t for statistics counter

2020-02-05 21:22:41 +00:00

yama

…

commoncap.c

…

device_cgroup.c

…

inode.c

…

Kconfig

…

Kconfig.hardening

…

lsm_audit.c

…

Makefile

…

min_addr.c

…

security.c

…