]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
lsm: secctx provider check on release
authorCasey Schaufler <casey@schaufler-ca.com>
Wed, 23 Oct 2024 21:21:58 +0000 (14:21 -0700)
committerPaul Moore <paul@paul-moore.com>
Wed, 4 Dec 2024 19:59:57 +0000 (14:59 -0500)
commita4626e978677e3d3e816fdc217d8416c8b9462ae
tree485d2f1f276cb40d726168ee7d2b3ec15b2c9fda
parentb530104f50e86db6f187d39fed5821b3cca755ee
lsm: secctx provider check on release

Verify that the LSM releasing the secctx is the LSM that
allocated it. This was not necessary when only one LSM could
create a secctx, but once there can be more than one it is.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: subject tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/apparmor/secid.c
security/selinux/hooks.c