Quoting Mimi Zohar ([email protected]): > If security_filter_rule_init() doesn't return a rule, then not everything > is as fine as the return code implies. > > This bug only occurs when the LSM (eg. SELinux) is disabled at runtime. > > Signed-off-by: Mimi Zohar <[email protected]>
Acked-by: Serge E. Hallyn <[email protected]> > Cc: Stable Kernel <[email protected]> > --- > security/integrity/ima/ima_policy.c | 2 ++ > 1 files changed, 2 insertions(+), 0 deletions(-) > > diff --git a/security/integrity/ima/ima_policy.c > b/security/integrity/ima/ima_policy.c > index aef8c0a..d661afb 100644 > --- a/security/integrity/ima/ima_policy.c > +++ b/security/integrity/ima/ima_policy.c > @@ -253,6 +253,8 @@ static int ima_lsm_rule_init(struct > ima_measure_rule_entry *entry, > result = security_filter_rule_init(entry->lsm[lsm_rule].type, > Audit_equal, args, > &entry->lsm[lsm_rule].rule); > + if (!entry->lsm[lsm_rule].rule) > + return -EINVAL; > return result; > } > > -- > 1.7.2.2 > _______________________________________________ stable mailing list [email protected] http://linux.kernel.org/mailman/listinfo/stable
