selinux: Fix send_sigiotask hook
The CRED patch incorrectly converted the SELinux send_sigiotask hook to use the current task SID rather than the target task SID in its permission check, yielding the wrong permission check. This fixes the hook function. Detected by the ltp selinux testsuite and confirmed to correct the test failure. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>
This commit is contained in:
Родитель
091438dd56
Коммит
65c90bca0d
|
@ -3153,7 +3153,7 @@ static int selinux_file_send_sigiotask(struct task_struct *tsk,
|
|||
struct fown_struct *fown, int signum)
|
||||
{
|
||||
struct file *file;
|
||||
u32 sid = current_sid();
|
||||
u32 sid = task_sid(tsk);
|
||||
u32 perm;
|
||||
struct file_security_struct *fsec;
|
||||
|
||||
|
|
Загрузка…
Ссылка в новой задаче