• Paul Moore's avatar
    [PATCH] NetLabel: correctly fill in unused CIPSOv4 level and category mappings · ddf14e7a
    Paul Moore authored
    Back when the original NetLabel patches were being changed to use Netlink
    attributes correctly some code was accidentially dropped which set all of the
    undefined CIPSOv4 level and category mappings to a sentinel value.  The result
    is the mappings data in the kernel contains bogus mappings which always map to
    zero.  Having level and category mappings that map to zero could result in the
    kernel assigning incorrect security attributes to packets.
    
    This patch restores the old/correct behavior by initializing the mapping
    data to the correct sentinel value.
    Signed-off-by: default avatarPaul Moore <paul.moore@hp.com>
    Signed-off-by: default avatarChris Wright <chrisw@sous-sol.org>
    ddf14e7a
netlabel_cipso_v4.c 20.8 KB