.27 patch

diff --git a/queue-2.6.27/series b/queue-2.6.27/series
index bd10a4c8ce5467f388000987cb89632e77895f02..07fcde05490cbb2399ee72e580ef12217278e3a9 100644 (file)
--- a/queue-2.6.27/series
+++ b/queue-2.6.27/series
@@ -56,3 +56,4 @@ pci-fix-incorrect-mask-of-pm-no_soft_reset-bit.patch
 thinkpad-acpi-fix-led-blinking-through-timer-trigger.patch
 acpi-ec-add-some-basic-check-for-ecdt-data.patch
 acpi-ec-fix-compilation-warning.patch
+unreached-code-in-selinux_ip_postroute_iptables_compat.patch

diff --git a/queue-2.6.27/unreached-code-in-selinux_ip_postroute_iptables_compat.patch b/queue-2.6.27/unreached-code-in-selinux_ip_postroute_iptables_compat.patch
new file mode 100644 (file)
index 0000000..916847f
--- /dev/null
+++ b/queue-2.6.27/unreached-code-in-selinux_ip_postroute_iptables_compat.patch
@@ -0,0 +1,36 @@
+From eteo@redhat.com  Wed Apr 29 13:47:17 2009
+From: Eugene Teo <eteo@redhat.com>
+Date: Mon, 13 Apr 2009 10:04:41 +0800
+Subject: unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184)
+To: paul.moore@hp.com
+Cc: jmorris@namei.org, greg@kroah.com, chrisw@redhat.com, error27@gmail.com
+Message-ID: <20090413020434.GA29916@kernel.sg>
+
+From: Eugene Teo <eteo@redhat.com>
+
+Not upstream in 2.6.30, as the function was removed there, making this a
+non-issue.
+
+Node and port send checks can skip in the compat_net=1 case. This bug
+was introduced in commit effad8d.
+
+Signed-off-by: Eugene Teo <eugeneteo@kernel.sg>
+Reported-by: Dan Carpenter <error27@gmail.com>
+Acked-by: James Morris <jmorris@namei.org>
+Acked-by: Paul Moore <paul.moore@hp.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ security/selinux/hooks.c |    1 +
+ 1 file changed, 1 insertion(+)
+
+--- a/security/selinux/hooks.c
++++ b/security/selinux/hooks.c
+@@ -4467,6 +4467,7 @@ static int selinux_ip_postroute_iptables
+       if (err)
+               return err;
+       err = avc_has_perm(sk_sid, if_sid, SECCLASS_NETIF, netif_perm, ad);
++      if (err)
+               return err;
+ 
+       err = sel_netnode_sid(addrp, family, &node_sid);