[v2,0/2] smack: fix two bugs in setting task label

Message

Konstantin Andreev March 15, 2025, 1:57 a.m. UTC

These two patches have distinct subjects,
but work on the same object,
  security/smack/smack_lsm.c`do_setattr()
and the second patch partially overwrites first,
so I combine them in a series.

v2: see individual patches

Konstantin Andreev (2):
  smack: fix bug: unprivileged task can create labels
  smack: fix bug: setting task label silently ignores input garbage

 Documentation/admin-guide/LSM/Smack.rst |  11 ++-
 security/smack/smack.h                  |   3 +
 security/smack/smack_access.c           |  93 ++++++++++++++-----
 security/smack/smack_lsm.c              | 118 ++++++++++++++++--------
 4 files changed, 164 insertions(+), 61 deletions(-)