RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2024-12-18 20:24:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

libsepol: validate class default targets

Browse Source 
Check the class default targets are valid values, e.g. source or target
for user, role and type.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
This commit is contained in:
Christian Göttsche 2021-12-09 17:49:28 +01:00 committed by James Carter
parent 24618ad3f5
commit 5e6e516ee0
1 changed files with 41 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
libsepol/src/policydb_validate.c
View File

@ -258,6 +258,47 @@ static int validate_class_datum(sepol_handle_t *handle, class_datum_t *class, va
if (class->permissions.nprim > PERM_SYMTAB_SIZE)
goto bad;
switch (class->default_user) {
case 0:
case DEFAULT_SOURCE:
case DEFAULT_TARGET:
break;
default:
goto bad;
}
switch (class->default_role) {
case 0:
case DEFAULT_SOURCE:
case DEFAULT_TARGET:
break;
default:
goto bad;
}
switch (class->default_type) {
case 0:
case DEFAULT_SOURCE:
case DEFAULT_TARGET:
break;
default:
goto bad;
}
switch (class->default_range) {
case 0:
case DEFAULT_SOURCE_LOW:
case DEFAULT_SOURCE_HIGH:
case DEFAULT_SOURCE_LOW_HIGH:
case DEFAULT_TARGET_LOW:
case DEFAULT_TARGET_HIGH:
case DEFAULT_TARGET_LOW_HIGH:
case DEFAULT_GLBLUB:
break;
default:
goto bad;
}
return 0;
bad: