From mboxrd@z Thu Jan 1 00:00:00 1970 Date: Wed, 12 Mar 2008 09:16:48 +1100 (EST) From: James Morris To: Eric Paris cc: selinux , sds@tycho.nsa.gov Subject: Re: [PATCH] SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG() In-Reply-To: <1205259574.5297.107.camel@localhost.localdomain> Message-ID: References: <1205259574.5297.107.camel@localhost.localdomain> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Tue, 11 Mar 2008, Eric Paris wrote: > This patch turns the case where we have a call into avc_has_perm with no > requested permissions into a BUG_ON. All callers to this should be in > the kernel and thus should be a function we need to fix if we ever hit > this. The /selinux/access permission checking it done directly in the > security server and not through the avc, so those requests which we > cannot control from userspace should not be able to trigger this BUG_ON. > > Signed-off-by: Eric Paris > Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/selinux-2.6.git#for-akpm -- James Morris -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.