From patchwork Thu Oct 18 07:47:04 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ondrej Mosnacek X-Patchwork-Id: 10647103 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id 0A2F9109C for ; Thu, 18 Oct 2018 12:55:51 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id EE4FE28653 for ; Thu, 18 Oct 2018 12:55:50 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id E13162872A; Thu, 18 Oct 2018 12:55:50 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=2.0 tests=BAYES_00,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from UPBD19PA09.eemsg.mail.mil (upbd19pa09.eemsg.mail.mil [214.24.27.84]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA256 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 6D71128723 for ; Thu, 18 Oct 2018 12:55:47 +0000 (UTC) X-EEMSG-check-008: 145531573|UPBD19PA09_EEMSG_MP9.csd.disa.mil Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.3]) by UPBD19PA09.eemsg.mail.mil with ESMTP/TLS/DHE-RSA-AES256-SHA256; 18 Oct 2018 12:55:42 +0000 X-IronPort-AV: E=Sophos;i="5.54,396,1534809600"; d="scan'208";a="19575488" IronPort-PHdr: 9a23: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 X-IPAS-Result: A2AYAAB8gchb/wHyM5BjGwEBAQEDAQEBBwMBAQGBUwQBAQELAYIBA4EJXCiMa4s8ixOOCRSBXxIBARgTAYlBITYLDQEDAQEBAQEBAgFsKII2JAGCZgIkEw0HIAsDAwkCQAgIAwEtAwEFAQsXAQcLBRgEgn+BdQ0DAZpaPIwGM4MqghCEaRKHGYQiF4FBP4ERh10BEgGFeQKIaYYZjzYJhh+DVoZnCxeBT4dQhwiCYYE+hH+MfwYCCQcPIYEpAy5kcU0jFTuCbJBYbYEFAQGHe4I+AQE Received: from tarius.tycho.ncsc.mil ([144.51.242.1]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 18 Oct 2018 12:55:40 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w9ICt9Kk023592; Thu, 18 Oct 2018 08:55:16 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id w9I7lFAw023803 for ; Thu, 18 Oct 2018 03:47:15 -0400 Received: from goalie.tycho.ncsc.mil (goalie.tycho.ncsc.mil [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id w9I7lFOL012410 for ; Thu, 18 Oct 2018 03:47:15 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1AlAAA6OchblywbGNZjHAEBAQQBAQcEAQGBUwUBAQsBggGBaCiMa5ZNjgiBegsBAYRshQAhNgsNAQMBAQEBAQECFAEBAQEBBhgGhj8gMoEVAQUBIgESgyCBdQ0DAZpJPIwGM4MqhnoShxiEIheBQT+BEY1qAohplUsJhh2DVYZnCxeBT4dQhwaCYIE+hH6MewYCCQcPIYEpC4F7TSMVgyeCNBqOCm2LDQEB X-IPAS-Result: A1AlAAA6OchblywbGNZjHAEBAQQBAQcEAQGBUwUBAQsBggGBaCiMa5ZNjgiBegsBAYRshQAhNgsNAQMBAQEBAQECFAEBAQEBBhgGhj8gMoEVAQUBIgESgyCBdQ0DAZpJPIwGM4MqhnoShxiEIheBQT+BEY1qAohplUsJhh2DVYZnCxeBT4dQhwaCYIE+hH6MewYCCQcPIYEpC4F7TSMVgyeCNBqOCm2LDQEB X-IronPort-AV: E=Sophos;i="5.54,395,1534824000"; d="scan'208";a="395061" Received: from emsm-gh1-uea11.ncsc.mil ([214.29.60.35]) by goalie.tycho.ncsc.mil with ESMTP; 18 Oct 2018 03:47:14 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AeAACjOchblywbGNZjHAEBAQQBAQcEAQGBUwUBAQsBggGBaCiMa4s8ixOOCYF6CwEBhGyFACE2Cw0BAwEBAQEBAQIBEwEBAQEBBhgGWII2JAGDDCAygRUBBQEiARKDIIF1DQMBmkw8jAYzgyqGehKHGYQiF4FBP4ERjWoCiGmVTwmGH4NWhmcLF4FPh1CHCIJhgT6Ef4x/BgIJBw8hgSkLgXtNIxWDJ4I0Go4KbYsNAQE X-IPAS-Result: A0AeAACjOchblywbGNZjHAEBAQQBAQcEAQGBUwUBAQsBggGBaCiMa4s8ixOOCYF6CwEBhGyFACE2Cw0BAwEBAQEBAQIBEwEBAQEBBhgGWII2JAGDDCAygRUBBQEiARKDIIF1DQMBmkw8jAYzgyqGehKHGYQiF4FBP4ERjWoCiGmVTwmGH4NWhmcLF4FPh1CHCIJhgT6Ef4x/BgIJBw8hgSkLgXtNIxWDJ4I0Go4KbYsNAQE X-IronPort-AV: E=Sophos;i="5.54,395,1534809600"; d="scan'208";a="19565447" X-IronPort-Outbreak-Status: No, level 0, Unknown - Unknown Received: from updc3cpa05.eemsg.mail.mil ([214.24.27.44]) by emsm-gh1-uea11.NCSC.MIL with ESMTP; 18 Oct 2018 07:47:13 +0000 X-EEMSG-check-005: 0 X-EEMSG-check-006: 000-001;d13b7479-3be7-4392-aef2-28853fd7febd Authentication-Results: UPDC3CPA11.eemsg.mail.mil; dkim=none (message not signed) header.i=none; spf=None smtp.pra=omosnace@redhat.com; spf=Pass smtp.mailfrom=omosnace@redhat.com; spf=None smtp.helo=postmaster@mail-wm1-f65.google.com; dmarc=pass (p=none dis=none) d=redhat.com X-EEMSG-check-008: 53433297|UPDC3CPA11_EEMSG_MP27.csd.disa.mil X-EEMSG-SBRS: 2.7 X-EEMSG-ORIG-IP: 209.85.128.65 X-EEMSG-check-002: true X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0BAAAD+OMhbf0GAVdFjHQIFCAWBVAYMAYQRjGuWTY4IgXoLAQEThFmFABkHAQQyCw0BAwEBAQEBAQEBARMBAQkLCwgbDDGCNiQBgwwgMoEVAQUBIgESgyCBdQ0Emkk8jAYzgyqGegkBCIcYhCIXgUE/gRGNagKIaZVLCYYdg1WGZwsXgU+HUIcGgmCBPoR+jHsGAgkHDyGBKQuBe00jFYMnkFhtiw0BAQ X-IPAS-Result: A0BAAAD+OMhbf0GAVdFjHQIFCAWBVAYMAYQRjGuWTY4IgXoLAQEThFmFABkHAQQyCw0BAwEBAQEBAQEBARMBAQkLCwgbDDGCNiQBgwwgMoEVAQUBIgESgyCBdQ0Emkk8jAYzgyqGegkBCIcYhCIXgUE/gRGNagKIaZVLCYYdg1WGZwsXgU+HUIcGgmCBPoR+jHsGAgkHDyGBKQuBe00jFYMnkFhtiw0BAQ Received: from mail-wm1-f65.google.com ([209.85.128.65]) by UPDC3CPA11.eemsg.mail.mil with ESMTP/TLS/AES128-SHA; 18 Oct 2018 07:47:11 +0000 Received: by mail-wm1-f65.google.com with SMTP id y144-v6so4650768wmd.4 for ; Thu, 18 Oct 2018 00:47:11 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=U2g3rk5tmPxXcT+eH9fki/4PrkfpyMaf5GScjZU0sOU=; b=tUbp7c79KRA9355gWfkJ1QBxb1Jg7jud81Jrbe99zTd2j3NjMsUWfUytpmqULAYmA9 o+RcjY2ClVIwhbX6b6mFK3srzM6OQOdDDYOqXW+2PNx3BbOmgO/0m/ndGMHJGk+R51Lk sjY2HfqxQdV1NDxV4mF2+onAgcFHatKnUuMr11Off7UM9aMDwWMevUCg7qY3WIGnIJ3D z+8gTM6njKc/YUpMuN/QpleauYuOMcnClKdrQrV7eO4QakIazfN3W7yy/V8xGm2H3l24 oeUQLhBmu8w5nRTZkl+NnvTjSAXQrbuxlIoNazNMgdww+/7DxwYmEqlhSqAw+ROuA4pC UAXw== X-Gm-Message-State: ABuFfohZzQ9lNNymtwQ7AlKIPqlwU23chKbn7eztflb/rN19atipWb2S Ko2fJy0mIrrRK+wnCj66Sg2rnw== X-Google-Smtp-Source: ACcGV60Tv187st0SG2YQNRqzttqnfl2Hek3GQQ7glCBKdWNRuF4VVwk7ZmQjTflHqz8AswoT2FQsLw== X-Received: by 2002:a1c:e0d7:: with SMTP id x206-v6mr6050130wmg.93.1539848829920; Thu, 18 Oct 2018 00:47:09 -0700 (PDT) Received: from localhost.localdomain.com (nat-pool-brq-t.redhat.com. [213.175.37.10]) by smtp.gmail.com with ESMTPSA id h78-v6sm6085394wmd.4.2018.10.18.00.47.08 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Thu, 18 Oct 2018 00:47:08 -0700 (PDT) X-EEMSG-check-009: 444-444 From: Ondrej Mosnacek To: selinux@vger.kernel.org, Paul Moore Date: Thu, 18 Oct 2018 09:47:04 +0200 Message-Id: <20181018074704.23835-1-omosnace@redhat.com> X-Mailer: git-send-email 2.17.2 X-Mailman-Approved-At: Thu, 18 Oct 2018 08:55:08 -0400 Subject: [PATCH v4] selinux: policydb - fix byte order and alignment issues X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Cc: stable@vger.kernel.org, Doug Ledford , selinux@tycho.nsa.gov, Eli Cohen , Stephen Smalley MIME-Version: 1.0 Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP Do the LE conversions before doing the Infiniband-related range checks. The incorrect checks are otherwise causing a failure to load any policy with an ibendportcon rule on BE systems. This can be reproduced by running (on e.g. ppc64): cat >my_module.cil < Cc: Eli Cohen Cc: James Morris Cc: Doug Ledford Cc: # 4.13+ Fixes: a806f7a1616f ("selinux: Create policydb version for Infiniband support") Signed-off-by: Ondrej Mosnacek --- security/selinux/ss/policydb.c | 46 +++++++++++++++++++++++----------- 1 file changed, 32 insertions(+), 14 deletions(-) Changes in v4: - defer assignment to 16-bit struct fields to after the range check Changes in v3: - use separate buffer for the 64-bit subnet_prefix - add comments on the byte ordering of subnet_prefix - deduplicate the le32_to_cpu() calls from checks Changes in v2: - add reproducer to commit message - update e-mail address of James Morris - better Cc also the old SELinux ML diff --git a/security/selinux/ss/policydb.c b/security/selinux/ss/policydb.c index f4eadd3f7350..d50668006a52 100644 --- a/security/selinux/ss/policydb.c +++ b/security/selinux/ss/policydb.c @@ -2108,6 +2108,7 @@ static int ocontext_read(struct policydb *p, struct policydb_compat_info *info, { int i, j, rc; u32 nel, len; + __be64 prefixbuf[1]; __le32 buf[3]; struct ocontext *l, *c; u32 nodebuf[8]; @@ -2217,21 +2218,30 @@ static int ocontext_read(struct policydb *p, struct policydb_compat_info *info, goto out; break; } - case OCON_IBPKEY: - rc = next_entry(nodebuf, fp, sizeof(u32) * 4); + case OCON_IBPKEY: { + u32 pkey_lo, pkey_hi; + + rc = next_entry(prefixbuf, fp, sizeof(u64)); + if (rc) + goto out; + + /* we need to have subnet_prefix in CPU order */ + c->u.ibpkey.subnet_prefix = be64_to_cpu(prefixbuf[0]); + + rc = next_entry(buf, fp, sizeof(u32) * 2); if (rc) goto out; - c->u.ibpkey.subnet_prefix = be64_to_cpu(*((__be64 *)nodebuf)); + pkey_lo = le32_to_cpu(buf[0]); + pkey_hi = le32_to_cpu(buf[1]); - if (nodebuf[2] > 0xffff || - nodebuf[3] > 0xffff) { + if (pkey_lo > U16_MAX || pkey_hi > U16_MAX) { rc = -EINVAL; goto out; } - c->u.ibpkey.low_pkey = le32_to_cpu(nodebuf[2]); - c->u.ibpkey.high_pkey = le32_to_cpu(nodebuf[3]); + c->u.ibpkey.low_pkey = pkey_lo; + c->u.ibpkey.high_pkey = pkey_hi; rc = context_read_and_validate(&c->context[0], p, @@ -2239,6 +2249,7 @@ static int ocontext_read(struct policydb *p, struct policydb_compat_info *info, if (rc) goto out; break; + } case OCON_IBENDPORT: rc = next_entry(buf, fp, sizeof(u32) * 2); if (rc) @@ -2249,13 +2260,14 @@ static int ocontext_read(struct policydb *p, struct policydb_compat_info *info, if (rc) goto out; - if (buf[1] > 0xff || buf[1] == 0) { + c->u.ibendport.port = le32_to_cpu(buf[1]); + + if (c->u.ibendport.port > 0xff || + c->u.ibendport.port == 0) { rc = -EINVAL; goto out; } - c->u.ibendport.port = le32_to_cpu(buf[1]); - rc = context_read_and_validate(&c->context[0], p, fp); @@ -3105,6 +3117,7 @@ static int ocontext_write(struct policydb *p, struct policydb_compat_info *info, { unsigned int i, j, rc; size_t nel, len; + __be64 prefixbuf[1]; __le32 buf[3]; u32 nodebuf[8]; struct ocontext *c; @@ -3192,12 +3205,17 @@ static int ocontext_write(struct policydb *p, struct policydb_compat_info *info, return rc; break; case OCON_IBPKEY: - *((__be64 *)nodebuf) = cpu_to_be64(c->u.ibpkey.subnet_prefix); + /* subnet_prefix is in CPU order */ + prefixbuf[0] = cpu_to_be64(c->u.ibpkey.subnet_prefix); - nodebuf[2] = cpu_to_le32(c->u.ibpkey.low_pkey); - nodebuf[3] = cpu_to_le32(c->u.ibpkey.high_pkey); + rc = put_entry(prefixbuf, sizeof(u64), 1, fp); + if (rc) + return rc; - rc = put_entry(nodebuf, sizeof(u32), 4, fp); + buf[0] = cpu_to_le32(c->u.ibpkey.low_pkey); + buf[1] = cpu_to_le32(c->u.ibpkey.high_pkey); + + rc = put_entry(buf, sizeof(u32), 2, fp); if (rc) return rc; rc = context_write(p, &c->context[0], fp);