• P
    selinux: Fix an uninitialized variable BUG/panic in selinux_secattr_to_sid() · 3040a6d5
    Paul Moore 提交于
    At some point during the 2.6.27 development cycle two new fields were added
    to the SELinux context structure, a string pointer and a length field.  The
    code in selinux_secattr_to_sid() was not modified and as a result these two
    fields were left uninitialized which could result in erratic behavior,
    including kernel panics, when NetLabel is used.  This patch fixes the
    problem by fully initializing the context in selinux_secattr_to_sid() before
    use and reducing the level of direct context manipulation done to help
    prevent future problems.
    
    Please apply this to the 2.6.27-rcX release stream.
    Signed-off-by: NPaul Moore <paul.moore@hp.com>
    Signed-off-by: NJames Morris <jmorris@namei.org>
    3040a6d5
services.c 66.0 KB