Commit 65c90bca authored May 04, 2009 by Stephen Smalley Committed by James Morris May 05, 2009

selinux: Fix send_sigiotask hook



The CRED patch incorrectly converted the SELinux send_sigiotask hook to
use the current task SID rather than the target task SID in its
permission check, yielding the wrong permission check.  This fixes the
hook function.  Detected by the ltp selinux testsuite and confirmed to
correct the test failure.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>

parent 091438dd

security/selinux/hooks.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -3153,7 +3153,7 @@ static int selinux_file_send_sigiotask(struct task_struct *tsk,
		struct fown_struct *fown, int signum)
		{
		struct file *file;
		u32 sid = current_sid();
		u32 sid = task_sid(tsk);
		u32 perm;
		struct file_security_struct *fsec;

Admin message