From: Greg Kroah-Hartman Date: Wed, 29 Apr 2009 20:50:02 +0000 (-0700) Subject: .28 patch X-Git-Tag: v2.6.27.22~7 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f186921eedc5c9111c8beaea03a5f7a9b7d8297f;p=thirdparty%2Fkernel%2Fstable-queue.git .28 patch --- diff --git a/queue-2.6.28/series b/queue-2.6.28/series index 24e1f8711fb..c04d0a31ad1 100644 --- a/queue-2.6.28/series +++ b/queue-2.6.28/series @@ -85,3 +85,4 @@ pci-fix-incorrect-mask-of-pm-no_soft_reset-bit.patch exit_notify-kill-the-wrong-capable-check.patch b44-use-kernel-dma-addresses-for-the-kernel-dma-api.patch thinkpad-acpi-fix-led-blinking-through-timer-trigger.patch +unreached-code-in-selinux_ip_postroute_iptables_compat.patch diff --git a/queue-2.6.28/unreached-code-in-selinux_ip_postroute_iptables_compat.patch b/queue-2.6.28/unreached-code-in-selinux_ip_postroute_iptables_compat.patch new file mode 100644 index 00000000000..c1589be1966 --- /dev/null +++ b/queue-2.6.28/unreached-code-in-selinux_ip_postroute_iptables_compat.patch @@ -0,0 +1,36 @@ +From eteo@redhat.com Wed Apr 29 13:47:17 2009 +From: Eugene Teo +Date: Mon, 13 Apr 2009 10:04:41 +0800 +Subject: unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184) +To: paul.moore@hp.com +Cc: jmorris@namei.org, greg@kroah.com, chrisw@redhat.com, error27@gmail.com +Message-ID: <20090413020434.GA29916@kernel.sg> + +From: Eugene Teo + +Not upstream in 2.6.30, as the function was removed there, making this a +non-issue. + +Node and port send checks can skip in the compat_net=1 case. This bug +was introduced in commit effad8d. + +Signed-off-by: Eugene Teo +Reported-by: Dan Carpenter +Acked-by: James Morris +Acked-by: Paul Moore +Signed-off-by: Greg Kroah-Hartman + +--- + security/selinux/hooks.c | 1 + + 1 file changed, 1 insertion(+) + +--- a/security/selinux/hooks.c ++++ b/security/selinux/hooks.c +@@ -4550,6 +4550,7 @@ static int selinux_ip_postroute_iptables + if (err) + return err; + err = avc_has_perm(sk_sid, if_sid, SECCLASS_NETIF, netif_perm, ad); ++ if (err) + return err; + + err = sel_netnode_sid(addrp, family, &node_sid);