Roman Kubiak 81bd0d5629 Smack: type confusion in smak sendmsg() handler ...

Smack security handler for sendmsg() syscall
is vulnerable to type confusion issue what
can allow to privilege escalation into root
or cause denial of service.

A malicious attacker can create socket of one
type for example AF_UNIX and pass is into
sendmsg() function ensuring that this is
AF_INET socket.

Remedy
Do not trust user supplied data.
Proposed fix below.

Signed-off-by: Roman Kubiak <r.kubiak@samsung.com>
Signed-off-by: Mateusz Fruba <m.fruba@samsung.com>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>

2015-12-17 10:21:56 -08:00

..

Kconfig

Smack: secmark support for netfilter

2015-01-20 16:34:25 -08:00

Makefile

Smack: Repair netfilter dependency

2015-01-23 10:08:19 -08:00

smack_access.c

Smack: limited capability for changing process label

2015-10-19 12:06:47 -07:00

smack_lsm.c

Smack: type confusion in smak sendmsg() handler

2015-12-17 10:21:56 -08:00

smack_netfilter.c

smack: use skb_to_full_sk() helper

2015-11-08 20:56:38 -05:00

smack.h

Smack: limited capability for changing process label

2015-10-19 12:06:47 -07:00

smackfs.c

Smack: limited capability for changing process label

2015-10-19 12:06:47 -07:00