Paul Moore 4c0ddc8712 selinux: add proper NULL termination to the secclass_map permissions ... commit e4c82eafb609c2badc56f4e11bc50fcf44b8e9eb upstream. This patch adds the missing NULL termination to the "bpf" and "perf_event" object class permission lists. This missing NULL termination should really only affect the tools under scripts/selinux, with the most important being genheaders.c, although in practice this has not been an issue on any of my dev/test systems. If the problem were to manifest itself it would likely result in bogus permissions added to the end of the object class; thankfully with no access control checks using these bogus permissions and no policies defining these permissions the impact would likely be limited to some noise about undefined permissions during policy load. Cc: stable@vger.kernel.org Fixes: ec27c3568a ("selinux: bpf: Add selinux check for eBPF syscall operations") Fixes: da97e18458 ("perf_event: Add support for LSM and SELinux checks") Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-05-14 09:49:59 +02:00
..
apparmor	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
bpf	bpf: Implement bpf_local_storage for inodes	2020-08-25 15:00:04 -07:00
integrity	integrity: double check iint_cache was initialized	2021-03-30 14:31:55 +02:00
keys	KEYS: trusted: Fix TPM reservation for seal/unseal	2021-04-28 13:39:59 +02:00
loadpin	LSM: Add "contents" flag to kernel_read_file hook	2020-10-05 13:37:03 +02:00
lockdown
safesetid	LSM: SafeSetID: Fix warnings reported by test bot	2020-10-13 09:17:36 -07:00
selinux	selinux: add proper NULL termination to the secclass_map permissions	2021-05-14 09:49:59 +02:00
smack	smackfs: restrict bytes count in smackfs write functions	2021-03-07 12:34:05 +01:00
tomoyo	tomoyo: recognize kernel threads correctly	2021-03-09 11:11:15 +01:00
yama	task_work: cleanup notification modes	2020-10-17 15:05:30 -06:00
commoncap.c	security: commoncap: fix -Wstringop-overread warning	2021-05-11 14:47:36 +02:00
device_cgroup.c	device_cgroup: Fix RCU list debugging warning	2020-08-20 11:25:03 -07:00
inode.c
Kconfig	Replace HTTP links with HTTPS ones: security	2020-08-06 12:00:05 -07:00
Kconfig.hardening	security: allow using Clang's zero initialization for stack variables	2020-06-16 02:06:23 -07:00
lsm_audit.c	dump_common_audit_data(): fix racy accesses to ->d_name	2021-01-19 18:27:29 +01:00
Makefile
min_addr.c
security.c	LSM: Add "contents" flag to kernel_read_file hook	2020-10-05 13:37:03 +02:00