Skip to content

Commit

Permalink
smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
Browse files Browse the repository at this point in the history
If the SMACK64TRANSMUTE xattr is provided, and the inode is a directory,
update the in-memory inode flags by setting SMK_INODE_TRANSMUTE.

Cc: stable@vger.kernel.org
Fixes: 5c6d112 ("Smack: Transmute labels on specified directories") # v2.6.38.x
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
  • Loading branch information
robertosassu authored and cschaufler committed Jan 24, 2024
1 parent 9c82169 commit ac02f00
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions security/smack/smack_lsm.c
Original file line number Diff line number Diff line change
Expand Up @@ -2856,6 +2856,15 @@ static int smack_inode_setsecurity(struct inode *inode, const char *name,
if (value == NULL || size > SMK_LONGLABEL || size == 0)
return -EINVAL;

if (strcmp(name, XATTR_SMACK_TRANSMUTE) == 0) {
if (!S_ISDIR(inode->i_mode) || size != TRANS_TRUE_SIZE ||
strncmp(value, TRANS_TRUE, TRANS_TRUE_SIZE) != 0)
return -EINVAL;

nsp->smk_flags |= SMK_INODE_TRANSMUTE;
return 0;
}

skp = smk_import_entry(value, size);
if (IS_ERR(skp))
return PTR_ERR(skp);
Expand Down

0 comments on commit ac02f00

Please sign in to comment.