bugfix patch for SMACK 93/31093/1
authorPankaj Kumar <pankaj.k2@samsung.com>
Fri, 13 Dec 2013 09:42:22 +0000 (15:12 +0530)
committerZbigniew Jasinski <z.jasinski@samsung.com>
Fri, 28 Nov 2014 09:36:02 +0000 (10:36 +0100)
commit5de50a88ed22caa238e3f2013c107c22d5308177
tree7e20c03598eeb3e2ba100a5525404bcaa11fc6c6
parent94877ed37973a6d6c9a558231c878e59f054010f
bugfix patch for SMACK

1. In order to remove any SMACK extended attribute from a file, a user
should have CAP_MAC_ADMIN capability. But user without having this
capability is able to remove SMACK64MMAP security attribute.

2. While validating size and value of smack extended attribute in
smack_inode_setsecurity hook, wrong error code is returned.

Change-Id: Ie71e86840f47b6810aaf4ff9a577cdea8274925b
Signed-off-by: Pankaj Kumar <pamkaj.k2@samsung.com>
Signed-off-by: Himanshu Shukla <himanshu.sh@samsung.com>
security/smack/smack_lsm.c