kernel_optimize_test/security/selinux/ss
Stephen Smalley 22df4adb04 selinux: change handling of invalid classes (Was: Re: 2.6.26-rc5-mm1 selinux whine)
On Mon, 2008-06-09 at 01:24 -0700, Andrew Morton wrote:
> Getting a few of these with FC5:
>
> SELinux: context_struct_compute_av:  unrecognized class 69
> SELinux: context_struct_compute_av:  unrecognized class 69
>
> one came out when I logged in.
>
> No other symptoms, yet.

Change handling of invalid classes by SELinux, reporting class values
unknown to the kernel as errors (w/ ratelimit applied) and handling
class values unknown to policy as normal denials.

Signed-off-by:  Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
2008-07-14 15:01:59 +10:00
..
avtab.c SELinux: keep the code clean formating and syntax 2008-07-14 15:01:36 +10:00
avtab.h
conditional.c
conditional.h
constraint.h
context.h selinux: support deferred mapping of contexts 2008-07-14 15:01:34 +10:00
ebitmap.c
ebitmap.h
hashtab.c
hashtab.h SELinux: hashtab.h whitespace, syntax, and other cleanups 2008-04-28 09:29:04 +10:00
Makefile
mls_types.h SELinux: mls_types.h whitespace, syntax, and other cleanups 2008-04-28 09:29:06 +10:00
mls.c SELinux: keep the code clean formating and syntax 2008-07-14 15:01:36 +10:00
mls.h selinux: support deferred mapping of contexts 2008-07-14 15:01:34 +10:00
policydb.c selinux: fix endianness bug in network node address handling 2008-07-14 15:01:54 +10:00
policydb.h SELinux: policydb.h whitespace, syntax, and other cleanups 2008-04-28 09:29:07 +10:00
services.c selinux: change handling of invalid classes (Was: Re: 2.6.26-rc5-mm1 selinux whine) 2008-07-14 15:01:59 +10:00
services.h
sidtab.c SELinux: open code sidtab lock 2008-07-14 15:01:57 +10:00
sidtab.h selinux: support deferred mapping of contexts 2008-07-14 15:01:34 +10:00
symtab.c
symtab.h