selinux/checkpolicy
James Carter 84a33fb96b checkpolicy: Check the right bits of an ibpkeycon rule subnet prefix
The lower 64 bits of the subnet prefix for an ibpkeycon rule should
all be 0's. Unfortunately the check uses the s6_addr macro which refers
to the 16 entry array of 8-bit values in the union and does not refer
to the correct bits.

Use the s6_addr32 macro instead which refers to the 4 entry array of
32-bit values in the union and refers to the lower 64 bits.

Signed-off-by: James Carter <jwcart2@gmail.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
2024-07-29 15:19:12 -04:00
..
fuzz checkpolicy: drop global policyvers variable 2024-05-01 16:48:25 -04:00
test libsepol: Use a dynamic buffer in sepol_av_to_string() 2024-03-04 09:45:41 -05:00
tests checkpolicy: support CIDR notation for nodecon statements 2024-05-24 08:46:34 -04:00
.gitignore checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
checkmodule.8 checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email 2023-08-04 13:57:01 -04:00
checkmodule.c checkpolicy: drop global policyvers variable 2024-05-01 16:48:25 -04:00
checkpolicy.8 checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email 2023-08-04 13:57:01 -04:00
checkpolicy.c checkpolicy: drop global policyvers variable 2024-05-01 16:48:25 -04:00
LICENSE docs: provide a top level LICENSE file 2022-10-05 08:20:38 -04:00
Makefile checkpolicy: add libfuzz based fuzzer 2024-03-04 09:54:47 -05:00
module_compiler.c checkpolicy: drop union stack_item_u 2024-04-04 11:17:50 -04:00
module_compiler.h checkpolicy: add libfuzz based fuzzer 2024-03-04 09:54:47 -05:00
parse_util.c checkpolicy: cleanup resources on parse error 2024-03-04 09:54:52 -05:00
parse_util.h initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
policy_define.c checkpolicy: Check the right bits of an ibpkeycon rule subnet prefix 2024-07-29 15:19:12 -04:00
policy_define.h checkpolicy: support CIDR notation for nodecon statements 2024-05-24 08:46:34 -04:00
policy_parse.y checkpolicy: support CIDR notation for nodecon statements 2024-05-24 08:46:34 -04:00
policy_scan.l checkpolicy: support CIDR notation for nodecon statements 2024-05-24 08:46:34 -04:00
queue.c checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email 2023-08-04 13:57:01 -04:00
queue.h checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email 2023-08-04 13:57:01 -04:00
VERSION Release 3.7 2024-06-26 17:30:41 +02:00