Commit 8ba8e0fb authored May 24, 2006 by Darrel Goeddel Committed by Al Viro Jun 20, 2006

[PATCH] fix se_sen audit filter



Fix a broken comparison that causes the process clearance to be checked for
both se_clr and se_sen audit filters.

Signed-off-by: Darrel Goeddel <dgoeddel@trustedcs.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

parent 014149cc

security/selinux/ss/services.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1980,7 +1980,7 @@ int selinux_audit_rule_match(u32 ctxid, u32 field, u32 op,
		break;
		case AUDIT_SE_SEN:
		case AUDIT_SE_CLR:
		level = (op == AUDIT_SE_SEN ?
		level = (field == AUDIT_SE_SEN ?
		&ctxt->range.level[0] : &ctxt->range.level[1]);
		switch (op) {
		case AUDIT_EQUAL: