Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6c8422df authored by Paul Moore's avatar Paul Moore Committed by Lee Jones
Browse files

BACKPORT: selinux: add proper NULL termination to the secclass_map permissions



This patch adds the missing NULL termination to the "bpf" and
"perf_event" object class permission lists.

This missing NULL termination should really only affect the tools
under scripts/selinux, with the most important being genheaders.c,
although in practice this has not been an issue on any of my dev/test
systems.  If the problem were to manifest itself it would likely
result in bogus permissions added to the end of the object class;
thankfully with no access control checks using these bogus
permissions and no policies defining these permissions the impact
would likely be limited to some noise about undefined permissions
during policy load.

Bug: 254441685
Cc: stable@vger.kernel.org
Fixes: ec27c356 ("selinux: bpf: Add selinux check for eBPF syscall operations")
Fixes: da97e18458fb ("perf_event: Add support for LSM and SELinux checks")
Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>

(cherry picked from commit e4c82eafb609c2badc56f4e11bc50fcf44b8e9eb)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I091e6d2f38182e2b972b8cc40ca00de331027921
parent 17eaba5c
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment