Commit fb85c525 authored by Paul Moore's avatar Paul Moore Committed by Willy Tarreau
Browse files

netlabel: add address family checks to netlbl_{sock,req}_delattr()



commit 0e0e3677 upstream.

It seems risky to always rely on the caller to ensure the socket's
address family is correct before passing it to the NetLabel kAPI,
especially since we see at least one LSM which didn't. Add address
family checks to the *_delattr() functions to help prevent future
problems.

Cc: <stable@vger.kernel.org>
Reported-by: default avatarManinder Singh <maninder1.s@samsung.com>
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
Signed-off-by: default avatarWilly Tarreau <w@1wt.eu>
parent 60a8744f
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment