netlabel: add address family checks to netlbl_{sock,req}_delattr()
authorPaul Moore <paul@paul-moore.com>
Mon, 6 Jun 2016 19:17:20 +0000 (15:17 -0400)
committerDanny Wood <danwood76@gmail.com>
Tue, 29 Jan 2019 13:13:53 +0000 (13:13 +0000)
commit8a4dacfb2175c2fd7b172845b40f277c7cbae2d0
treeb65dbd7def9b7a63668345d1d79090ffaadd78b7
parent4dd39a5a3c651049e03339383dfca77294dba10e
netlabel: add address family checks to netlbl_{sock,req}_delattr()

commit 0e0e36774081534783aa8eeb9f6fbddf98d3c061 upstream.

It seems risky to always rely on the caller to ensure the socket's
address family is correct before passing it to the NetLabel kAPI,
especially since we see at least one LSM which didn't. Add address
family checks to the *_delattr() functions to help prevent future
problems.

Cc: <stable@vger.kernel.org>
Reported-by: Maninder Singh <maninder1.s@samsung.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
net/netlabel/netlabel_kapi.c