Ondrej Mosnacek aff7ed4851 selinux: log raw contexts as untrusted strings ... These strings may come from untrusted sources (e.g. file xattrs) so they need to be properly escaped. Reproducer: # setenforce 0 # touch /tmp/test # setfattr -n security.selinux -v 'kuřecí řízek' /tmp/test # runcon system_u:system_r:sshd_t:s0 cat /tmp/test (look at the generated AVCs) Actual result: type=AVC [...] trawcon=kuřecí řízek Expected result: type=AVC [...] trawcon=6B75C5996563C3AD20C599C3AD7A656B Fixes: fede148324 ("selinux: log invalid contexts in AVCs") Cc: stable@vger.kernel.org # v5.1+ Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com> Acked-by: Richard Guy Briggs <rgb@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com>		2019-06-11 18:35:51 -04:00
..
include	selinux: try security xattr after genfs for kernfs filesystems	2019-03-20 21:53:04 -04:00
ss	selinux: remove useless assignments	2019-03-25 10:25:06 -04:00
.gitignore
avc.c	selinux: log raw contexts as untrusted strings	2019-06-11 18:35:51 -04:00
hooks.c	selinux: do not report error on connect(AF_UNSPEC)	2019-05-20 21:46:02 -04:00
ibpkey.c
Kconfig	selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUE	2019-01-08 13:18:43 -08:00
Makefile	SELinux: Remove unused selinux_is_enabled	2019-01-08 13:18:44 -08:00
netif.c	selinux: Cleanup printk logging in netif	2018-06-19 13:45:31 -04:00
netlabel.c	selinux: avoid uninitialized variable warning	2019-03-25 10:34:35 -04:00
netlink.c	selinux: Cleanup printk logging in netlink	2018-06-19 13:33:05 -04:00
netnode.c	selinux: Cleanup printk logging in netnode	2018-06-19 13:49:10 -04:00
netport.c	selinux: Cleanup printk logging in netport	2018-06-19 13:43:01 -04:00
nlmsgtab.c	selinux: add support for RTM_NEWCHAIN, RTM_DELCHAIN, and RTM_GETCHAIN	2018-11-29 11:32:02 -05:00
selinuxfs.c	SELinux: Abstract use of inode security blob	2019-01-08 13:18:44 -08:00
xfrm.c	SELinux: Abstract use of cred security blob	2019-01-08 13:18:44 -08:00