Paul Moore 002924ab7b selinux: skip bounded transition processing if the policy isn't loaded ... commit 4b14752ec4e0d87126e636384cf37c8dd9df157c upstream. We can't do anything reasonable in security_bounded_transition() if we don't have a policy loaded, and in fact we could run into problems with some of the code inside expecting a policy. Fix these problems like we do many others in security/selinux/ss/services.c by checking to see if the policy is loaded (ss_initialized) and returning quickly if it isn't. Reported-by: syzbot <syzkaller-bugs@googlegroups.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Reviewed-by: James Morris <james.l.morris@oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-02-25 11:03:36 +01:00
..
apparmor
integrity
keys	KEYS: encrypted: fix buffer overread in valid_master_desc()	2018-02-16 20:09:38 +01:00
selinux	selinux: skip bounded transition processing if the policy isn't loaded	2018-02-25 11:03:36 +01:00
smack
tomoyo
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig	KPTI: Rename to PAGE_TABLE_ISOLATION	2018-01-05 15:44:26 +01:00
lsm_audit.c
Makefile
min_addr.c
security.c