From: Greg Kroah-Hartman Date: Wed, 29 Apr 2009 20:51:32 +0000 (-0700) Subject: .29 patch X-Git-Tag: v2.6.27.22~5 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c3b09527b6c0304438ca0af99e6359cda22e4150;p=thirdparty%2Fkernel%2Fstable-queue.git .29 patch --- diff --git a/queue-2.6.29/series b/queue-2.6.29/series index f1fa000ea7b..7a2079832d6 100644 --- a/queue-2.6.29/series +++ b/queue-2.6.29/series @@ -16,3 +16,4 @@ block-include-empty-disks-in-proc-diskstats.patch crypto-ixp4xx-fix-handling-of-chained-sg-buffers.patch exit_notify-kill-the-wrong-capable-check.patch pci-fix-incorrect-mask-of-pm-no_soft_reset-bit.patch +unreached-code-in-selinux_ip_postroute_iptables_compat.patch diff --git a/queue-2.6.29/unreached-code-in-selinux_ip_postroute_iptables_compat.patch b/queue-2.6.29/unreached-code-in-selinux_ip_postroute_iptables_compat.patch new file mode 100644 index 00000000000..758365d31b3 --- /dev/null +++ b/queue-2.6.29/unreached-code-in-selinux_ip_postroute_iptables_compat.patch @@ -0,0 +1,36 @@ +From eteo@redhat.com Wed Apr 29 13:47:17 2009 +From: Eugene Teo +Date: Mon, 13 Apr 2009 10:04:41 +0800 +Subject: unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184) +To: paul.moore@hp.com +Cc: jmorris@namei.org, greg@kroah.com, chrisw@redhat.com, error27@gmail.com +Message-ID: <20090413020434.GA29916@kernel.sg> + +From: Eugene Teo + +Not upstream in 2.6.30, as the function was removed there, making this a +non-issue. + +Node and port send checks can skip in the compat_net=1 case. This bug +was introduced in commit effad8d. + +Signed-off-by: Eugene Teo +Reported-by: Dan Carpenter +Acked-by: James Morris +Acked-by: Paul Moore +Signed-off-by: Greg Kroah-Hartman + +--- + security/selinux/hooks.c | 1 + + 1 file changed, 1 insertion(+) + +--- a/security/selinux/hooks.c ++++ b/security/selinux/hooks.c +@@ -4661,6 +4661,7 @@ static int selinux_ip_postroute_iptables + if (err) + return err; + err = avc_has_perm(sk_sid, if_sid, SECCLASS_NETIF, netif_perm, ad); ++ if (err) + return err; + + err = sel_netnode_sid(addrp, family, &node_sid);