BACKPORT: Fix a bidirectional UDS connect check typo

The 54e70ec5eb090193b03e69d551fa6771a5a217c4 commit introduced a
bidirectional check that should have checked for mutual WRITE access
between two labels. Due to a typo the second check was incorrect.

Signed-off-by: Lukasz Pawelczyk <l.pawelczyk@samsung.com>
(cherry-picked from upstream d01757904d9deb619e23c9450218829943a46822)

diff --git a/security/smack/smack_lsm.c b/security/smack/smack_lsm.c
index dea8fe004fe89f27ff2e328da65cb6f52901bd3c..53fe0ab3a36a2c2d0b3ba3a8ec68475842a6547c 100644 (file)
--- a/security/smack/smack_lsm.c
+++ b/security/smack/smack_lsm.c
@@ -3317,8 +3317,8 @@ static int smack_unix_stream_connect(struct sock *sock,
                rc = smk_bu_note("UDS connect", skp, okp->smk_known,
                                        MAY_WRITE, rc);
                if (rc == 0) {
-                       rc = smk_access(okp, okp->smk_known, MAY_WRITE, NULL);
-                       rc = smk_bu_note("UDS connect", okp, okp->smk_known,
+                       rc = smk_access(okp, skp->smk_known, MAY_WRITE, NULL);
+                       rc = smk_bu_note("UDS connect", okp, skp->smk_known,
                                                MAY_WRITE, rc);
                }
        }