Unverified Commit 25b0111b authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14551 selinux: ignore unknown extended permissions 

Merge Pull Request from: @ci-robot 
 
PR sync from: Gu Bowen <gubowen5@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/ME3CZMMSD7IVL3CSTTCOCHAL3JW7P2JG/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBEUBD 
 
Link:https://gitee.com/openeuler/kernel/pulls/14551

 

Reviewed-by: default avatarYuan Can <yuancan@huawei.com>
Signed-off-by: default avatarYuan Can <yuancan@huawei.com>
parents 27591c5a 483613d2

security/selinux/ss/services.c

+6 −2
Original line number Diff line number Diff line
@@ -965,7 +965,10 @@ void services_compute_xperms_decision(struct extended_perms_decision *xpermd, 
					xpermd->driver))

			return;

	} else {

		BUG();

		pr_warn_once(

			"SELinux: unknown extended permission (%u) will be ignored\n",

			node->datum.u.xperms->specified);

		return;

	}



	if (node->key.specified == AVTAB_XPERMS_ALLOWED) {
@@ -1002,7 +1005,8 @@ void services_compute_xperms_decision(struct extended_perms_decision *xpermd, 
					node->datum.u.xperms->perms.p[i];

		}

	} else {

		BUG();

		pr_warn_once("SELinux: unknown specified key (%u)\n",

				node->key.specified);

	}

}