* [PATCH] Fix hierarchy checking on type rules
@ 2005-07-14 15:30 Joshua Brindle
2005-07-18 14:28 ` Stephen Smalley
0 siblings, 1 reply; 2+ messages in thread
From: Joshua Brindle @ 2005-07-14 15:30 UTC (permalink / raw)
To: selinux
Currently the hierarchy checker will incorrectly try to check type
rules, this patch fixes that.
diff -u -r1.4 hierarchy.c
--- libsepol/src/hierarchy.c 6 Jul 2005 17:45:07 -0000 1.4
+++ libsepol/src/hierarchy.c 14 Jul 2005 15:29:16 -0000
@@ -127,6 +127,11 @@
uint32_t av;
type_datum_t *t = NULL, *t2 = NULL;
+ if (!d->specified & AVTAB_AV) {
+ /* This is a type rule, no checking done */
+ return 0;
+ }
+
a = (hierarchy_args_t *)args;
if (find_parent(a->p->p_type_val_to_name[k->source_type - 1],
&parent))
return -1;
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: [PATCH] Fix hierarchy checking on type rules
2005-07-14 15:30 [PATCH] Fix hierarchy checking on type rules Joshua Brindle
@ 2005-07-18 14:28 ` Stephen Smalley
0 siblings, 0 replies; 2+ messages in thread
From: Stephen Smalley @ 2005-07-18 14:28 UTC (permalink / raw)
To: Joshua Brindle; +Cc: selinux
On Thu, 2005-07-14 at 11:30 -0400, Joshua Brindle wrote:
> Currently the hierarchy checker will incorrectly try to check type
> rules, this patch fixes that.
Corrected patch merged.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2005-07-18 14:28 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-07-14 15:30 [PATCH] Fix hierarchy checking on type rules Joshua Brindle
2005-07-18 14:28 ` Stephen Smalley
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.