Re: [PATCH] netlabel: add address family checks to netlbl_{sock, req}_delattr()

2016-06-06 Thread David Miller
From: Paul Moore Date: Mon, 6 Jun 2016 15:37:56 -0400 > On Mon, Jun 6, 2016 at 3:35 PM, Paul Moore wrote: >> From: Paul Moore >> >> It seems risky to always rely on the caller to ensure the socket's >> address family is correct before passing it to the NetLabel kAPI, >> especially since we see

Re: [PATCH] netlabel: add address family checks to netlbl_{sock, req}_delattr()

2016-06-06 Thread Paul Moore
On Mon, Jun 6, 2016 at 3:35 PM, Paul Moore wrote: > From: Paul Moore > > It seems risky to always rely on the caller to ensure the socket's > address family is correct before passing it to the NetLabel kAPI, > especially since we see at least one LSM which didn't. Add address > family checks to t

[PATCH] netlabel: add address family checks to netlbl_{sock, req}_delattr()

2016-06-06 Thread Paul Moore
From: Paul Moore It seems risky to always rely on the caller to ensure the socket's address family is correct before passing it to the NetLabel kAPI, especially since we see at least one LSM which didn't. Add address family checks to the *_delattr() functions to help prevent future problems. Cc: