Re: [PATCH] selinux: ensure the context is NULL terminated in security_context_to_sid_core()

2017-12-01 Thread Paul Moore
On Fri, Dec 1, 2017 at 2:20 PM, Stephen Smalley wrote: > On Fri, 2017-12-01 at 10:34 -0500, Paul Moore wrote: >> On Thu, Nov 30, 2017 at 6:44 PM, William Roberts >> wrote: >> > On Thu, Nov 30, 2017 at 8:52 AM, Paul Moore >> >

Re: [PATCH] selinux: ensure the context is NULL terminated in security_context_to_sid_core()

2017-12-01 Thread Stephen Smalley
On Fri, 2017-12-01 at 10:34 -0500, Paul Moore wrote: > On Thu, Nov 30, 2017 at 6:44 PM, William Roberts > wrote: > > On Thu, Nov 30, 2017 at 8:52 AM, Paul Moore > > wrote: > > > From: Paul Moore > > > > > > The syzbot/syzkaller

Re: [PATCH] selinux: ensure the context is NULL terminated in security_context_to_sid_core()

2017-12-01 Thread Paul Moore
On Thu, Nov 30, 2017 at 6:44 PM, William Roberts wrote: > On Thu, Nov 30, 2017 at 8:52 AM, Paul Moore wrote: >> From: Paul Moore >> >> The syzbot/syzkaller automated tests found a problem in >> security_context_to_sid_core()

Re: [PATCH] selinux: ensure the context is NULL terminated in security_context_to_sid_core()

2017-11-30 Thread James Morris
On Thu, 30 Nov 2017, Paul Moore wrote: > From: Paul Moore > > The syzbot/syzkaller automated tests found a problem in > security_context_to_sid_core() during early boot (before we load the > SELinux policy) where we could potentially feed context strings without > NULL