Skip to content

Commit c7fb50c

Browse files
goongascschaufler
authored andcommitted
smack: Revert "smackfs: Added check catlen"
This reverts commit ccfd889 The indicated commit * does not describe the problem that change tries to solve * has programming issues * introduces a bug: forever clears NETLBL_SECATTR_MLS_CAT in (struct smack_known *)skp->smk_netlabel.flags Reverting the commit to reapproach original problem Signed-off-by: Konstantin Andreev <[email protected]> Signed-off-by: Casey Schaufler <[email protected]>
1 parent bf9f14c commit c7fb50c

File tree

1 file changed

+3
-14
lines changed

1 file changed

+3
-14
lines changed

security/smack/smackfs.c

Lines changed: 3 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -814,7 +814,7 @@ static int smk_open_cipso(struct inode *inode, struct file *file)
814814
static ssize_t smk_set_cipso(struct file *file, const char __user *buf,
815815
size_t count, loff_t *ppos, int format)
816816
{
817-
struct netlbl_lsm_catmap *old_cat, *new_cat = NULL;
817+
struct netlbl_lsm_catmap *old_cat;
818818
struct smack_known *skp;
819819
struct netlbl_lsm_secattr ncats;
820820
char mapcatset[SMK_CIPSOLEN];
@@ -901,19 +901,8 @@ static ssize_t smk_set_cipso(struct file *file, const char __user *buf,
901901

902902
smack_catset_bit(cat, mapcatset);
903903
}
904-
ncats.flags = 0;
905-
if (catlen == 0) {
906-
ncats.attr.mls.cat = NULL;
907-
ncats.attr.mls.lvl = maplevel;
908-
new_cat = netlbl_catmap_alloc(GFP_ATOMIC);
909-
if (new_cat)
910-
new_cat->next = ncats.attr.mls.cat;
911-
ncats.attr.mls.cat = new_cat;
912-
skp->smk_netlabel.flags &= ~(1U << 3);
913-
rc = 0;
914-
} else {
915-
rc = smk_netlbl_mls(maplevel, mapcatset, &ncats, SMK_CIPSOLEN);
916-
}
904+
905+
rc = smk_netlbl_mls(maplevel, mapcatset, &ncats, SMK_CIPSOLEN);
917906
if (rc >= 0) {
918907
old_cat = skp->smk_netlabel.attr.mls.cat;
919908
rcu_assign_pointer(skp->smk_netlabel.attr.mls.cat, ncats.attr.mls.cat);

0 commit comments

Comments
 (0)