selinux: format all invalid context as untrusted
authorRichard Guy Briggs <rgb@redhat.com>
Thu, 27 Jun 2019 16:48:01 +0000 (12:48 -0400)
committerPaul Moore <paul@paul-moore.com>
Mon, 1 Jul 2019 20:29:05 +0000 (16:29 -0400)
commitea74a685ad819aeed316a9bae3d2a5bf762da82d
treeba13e694ed22fbd1494bdca74db130914f5d900a
parent464c258aa45b09f16aa0f05847ed8895873262d9
selinux: format all invalid context as untrusted

The userspace tools expect all fields of the same name to be logged
consistently with the same encoding.  Since the invalid_context fields
contain untrusted strings in selinux_inode_setxattr()
and selinux_setprocattr(), encode all instances of this field the same
way as though they were untrusted even though
compute_sid_handle_invalid_context() and security_sid_mls_copy() are
trusted.

Please see github issue
https://github.com/linux-audit/audit-kernel/issues/57

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/ss/services.c