| commit | 050d032b25e617cd738db8d6fd5aed24d87cbbcb | [log] [tgz] |
|---|---|---|
| author | Paul Moore <pmoore@redhat.com> | Tue Dec 03 11:36:11 2013 -0500 |
| committer | Paul Moore <pmoore@redhat.com> | Wed Dec 04 16:08:17 2013 -0500 |
| tree | 53771bb7cebc1cf36bbd0442d3acc1a93e4ccedb | |
| parent | 7f721643db3b2da53e1b91aaa4e8cb7706bfdd10 [diff] |
selinux: ensure that the cached NetLabel secattr matches the desired SID In selinux_netlbl_skbuff_setsid() we leverage a cached NetLabel secattr whenever possible. However, we never check to ensure that the desired SID matches the cached NetLabel secattr. This patch checks the SID against the secattr before use and only uses the cached secattr when the SID values match. Signed-off-by: Paul Moore <pmoore@redhat.com>