Re: [PATCH net] netlabel: cope with NULL catmap

2020-05-12 Thread David Miller
From: Paolo Abeni Date: Tue, 12 May 2020 14:43:14 +0200 > The cipso and calipso code can set the MLS_CAT attribute on > successful parsing, even if the corresponding catmap has > not been allocated, as per current configuration and external > input. > > Later, selinux code tries to access the ca

Re: [PATCH net] netlabel: cope with NULL catmap

2020-05-12 Thread Paul Moore
On Tue, May 12, 2020 at 8:44 AM Paolo Abeni wrote: > > The cipso and calipso code can set the MLS_CAT attribute on > successful parsing, even if the corresponding catmap has > not been allocated, as per current configuration and external > input. > > Later, selinux code tries to access the catmap

[PATCH net] netlabel: cope with NULL catmap

2020-05-12 Thread Paolo Abeni
The cipso and calipso code can set the MLS_CAT attribute on successful parsing, even if the corresponding catmap has not been allocated, as per current configuration and external input. Later, selinux code tries to access the catmap if the MLS_CAT flag is present via netlbl_catmap_getlong(). That