netlabel: add address family checks to netlbl_{sock,req}_delattr()
authorPaul Moore <paul@paul-moore.com>
Mon, 6 Jun 2016 19:17:20 +0000 (15:17 -0400)
committerWilly Tarreau <w@1wt.eu>
Sat, 27 Aug 2016 09:40:37 +0000 (11:40 +0200)
commitfb85c52515a65aa9763c0c480b9bbbb9de6e08ca
tree60e3bf78ba8fc14d58b3c89ea9392317066a99e0
parent60a8744f15d8bdcab6dc4f21728d8e9cb5e8880f
netlabel: add address family checks to netlbl_{sock,req}_delattr()

commit 0e0e36774081534783aa8eeb9f6fbddf98d3c061 upstream.

It seems risky to always rely on the caller to ensure the socket's
address family is correct before passing it to the NetLabel kAPI,
especially since we see at least one LSM which didn't. Add address
family checks to the *_delattr() functions to help prevent future
problems.

Cc: <stable@vger.kernel.org>
Reported-by: Maninder Singh <maninder1.s@samsung.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
net/netlabel/netlabel_kapi.c