Smack: correct final mmap check comparison
authorCasey Schaufler <casey@schaufler-ca.com>
Thu, 10 Feb 2011 03:58:42 +0000 (19:58 -0800)
committerCasey Schaufler <casey@schaufler-ca.com>
Thu, 10 Feb 2011 03:58:42 +0000 (19:58 -0800)
commit75a25637bf8a1b8fbed2368c0a3ec15c66a534f1
tree038d52827d9a285fed1bb384f06d7adabf4ef674
parentdb904aa8147440b750a35d58befed38155a1abb9
Smack: correct final mmap check comparison

The mmap policy enforcement checks the access of the
SMACK64MMAP subject against the current subject incorrectly.
The check as written works correctly only if the access
rules involved have the same access. This is the common
case, so initial testing did not find a problem.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
security/smack/smack_lsm.c