netlabel: add address family checks to netlbl_{sock,req}_delattr()
authorPaul Moore <paul@paul-moore.com>
Mon, 6 Jun 2016 19:17:20 +0000 (15:17 -0400)
committerBen Hutchings <ben@decadent.org.uk>
Sun, 20 Nov 2016 01:01:22 +0000 (01:01 +0000)
commitbc64d7bf6753b764b1a4c7865b11fce433d49b7f
treef4dbec111e34bd7ef006cea044a4ba8d55208883
parente0aed02428ed3abcab09772afc1d4d60faed3c93
netlabel: add address family checks to netlbl_{sock,req}_delattr()

commit 0e0e36774081534783aa8eeb9f6fbddf98d3c061 upstream.

It seems risky to always rely on the caller to ensure the socket's
address family is correct before passing it to the NetLabel kAPI,
especially since we see at least one LSM which didn't. Add address
family checks to the *_delattr() functions to help prevent future
problems.

Reported-by: Maninder Singh <maninder1.s@samsung.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
net/netlabel/netlabel_kapi.c