]> www.infradead.org Git - users/jedix/linux-maple.git/commit
selinux: get netif_wildcard policycap from policy instead of cache
authorChristian Göttsche <cgzones@googlemail.com>
Wed, 12 Mar 2025 08:00:48 +0000 (09:00 +0100)
committerPaul Moore <paul@paul-moore.com>
Mon, 17 Mar 2025 20:22:04 +0000 (16:22 -0400)
commita3d3043ef24ac750f05a164e48f3d0833ebf0252
treead3876c4dc254fe0c2d23c775a86ca2e6ff09433
parent8af43b61c17e9a18b06fd6ab26370543f21eb4e4
selinux: get netif_wildcard policycap from policy instead of cache

Retrieve the netif_wildcard policy capability in security_netif_sid()
from the locked active policy instead of the cached value in
selinux_state.

Fixes: 8af43b61c17e ("selinux: support wildcard network interface names")
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
[PM: /netlabel/netif/ due to a typo in the description]
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/ss/services.c