The attached patch fixes a bug in the selinux_inode_delete hook function in the latest release. Sorry for not catching this prior to the release. This hook function should only call clear_psid if the inode is associated with a superblock that uses persistent SIDs. This is particularly a problem if the inode does not have an associated superblock at all. You can apply this patch by saving it to ~/delete.patch, changing to the selinux directory, and running 'patch -p1 < ~/delete.patch'. This patch is for the hooks.c file, which is located in selinux/module/selinux_plug in the SELinux archive or in lsm/security/selinux when SELinux is inserted into the kernel tree.
-- Stephen D. Smalley, NAI Labs ssmalley@nai.com-- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.
- TEXT/PLAIN attachment: delete.patch
This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:54 EDT