Stephen Smalley b1aa5301b9 selinux: fix labeling of /proc/net inodes ...

The proc net rewrite had a side effect on selinux, leading it to mislabel
the /proc/net inodes, thereby leading to incorrect denials.  Fix
security_genfs_sid to ignore extra leading / characters in the path supplied
by selinux_proc_get_sid since we now get "//net/..." rather than "/net/...".

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>

2008-01-26 12:16:16 +11:00

..

include

Security: add get, set, and cloning of superblock security information

2008-01-25 11:29:46 +11:00

ss

selinux: fix labeling of /proc/net inodes

2008-01-26 12:16:16 +11:00

avc.c

SELinux: Improve read/write performance

2007-10-17 08:59:31 +10:00

exports.c

…

hooks.c

security: add a secctx_to_secid() hook

2008-01-25 11:29:53 +11:00

Kconfig

Fix trivial typos in Kconfig* files

2007-05-09 07:12:20 +02:00

Makefile

…

netif.c

[NET]: Make device event notification network namespace safe

2007-10-10 16:49:09 -07:00

netlabel.c

selinux: fix memory leak in netlabel code

2008-01-22 09:31:00 +11:00

netlink.c

[NET]: Support multiple network namespaces with netlink

2007-10-10 16:49:09 -07:00

nlmsgtab.c

Audit: add TTY input auditing

2007-07-16 09:05:47 -07:00

selinuxfs.c

security/selinux: constify function pointer tables and fields

2008-01-25 11:29:54 +11:00

xfrm.c

SELinux: suppress a warning for 64k pages.

2007-11-08 08:55:04 +11:00