Unverified Commit 4c02bc5f authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14972 selinux: ignore unknown extended permissions 

Merge Pull Request from: @ci-robot 
 
PR sync from: GONG Ruiqi <gongruiqi1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/NWA5OOOBZ4VN3QXFNEBZEWUJBXPSSJZI/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBJ6OD 
 
Link:https://gitee.com/openeuler/kernel/pulls/14972

 

Reviewed-by: default avatarZhang Peng <zhangpeng362@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 9eaaa8ee 7335230c

security/selinux/ss/services.c

+6 −2
Original line number Diff line number Diff line
@@ -956,7 +956,10 @@ void services_compute_xperms_decision(struct extended_perms_decision *xpermd, 
					xpermd->driver))

			return;

	} else {

		BUG();

		pr_warn_once(

			"SELinux: unknown extended permission (%u) will be ignored\n",

			node->datum.u.xperms->specified);

		return;

	}



	if (node->key.specified == AVTAB_XPERMS_ALLOWED) {
@@ -993,7 +996,8 @@ void services_compute_xperms_decision(struct extended_perms_decision *xpermd, 
					node->datum.u.xperms->perms.p[i];

		}

	} else {

		BUG();

		pr_warn_once("SELinux: unknown specified key (%u)\n",

			     node->key.specified);

	}

}