Code

RFE: policydb read validation#72

Code

Draft

cgzones wants to merge 22 commits intoSELinuxProject:devSELinuxProject/selinux-kernel:devfrom cgzones:dev_wip_policadb_readcgzones/selinux-kernel:dev_wip_policadb_readCopy head branch name to clipboard

+940-362

Commits

Commits on Dec 16, 2024

• selinux: supply missing field initializers

  Show description for 7dec3b8
  cgzones

  committed
  7dec3b8

• selinux: avoid using types indicating user space interaction

  Show description for aa7eed7
  cgzones

  committed
  aa7eed7

• selinux: align and constify functions

  Show description for 700fbb4
  cgzones

  committed
  700fbb4

• selinux: rework match_ipv6_addrmask()

  Show description for 4244746
  cgzones

  committed
  4244746

• selinux: avoid nontransitive comparison

  Show description for 77ff838
  cgzones

  committed
  77ff838

• selinux: rename comparison functions for clarity

  Show description for 4dd8d99
  cgzones

  committed
  4dd8d99

• selinux: use known type instead of void pointer

  Show description for 006cadd
  cgzones

  committed
  006cadd

• selinux: avoid unnecessary indirection in struct level_datum

  Show description for 2269778
  cgzones

  committed
  2269778

• selinux: make use of str_read()

  Show description for 3c9b6ba
  cgzones

  committed
  3c9b6ba

• selinux: use u16 for security classes

  Show description for 6af4054
  cgzones

  committed
  6af4054

• selinux: more strict policy parsing

  Show description for cf94452
  cgzones

  committed
  cf94452

Commits on Jan 7, 2025

• selinux: check length fields in policies

  Show description for 147b5ef
  cgzones

  committed
  147b5ef

• selinux: validate constraints

  Show description for 68c7ee9
  cgzones

  committed
  68c7ee9

• selinux: pre-validate conditional expressions

  Show description for db38021
  cgzones

  committed
  db38021

• selinux: introduce ebitmap_highest_set_bit()

  Show description for 49208dc
  cgzones

  committed
  49208dc

• selinux: check type attr map overflows

  Show description for 47ed2d5
  cgzones

  committed
  47ed2d5

• selinux: reorder policydb_index()

  Show description for c7d0d82
  cgzones

  committed
  c7d0d82

• selinux: beef up isvalid checks

  Show description for c8fa296
  cgzones

  committed
  c8fa296

• selinux: validate symbols

  Show description for 21f6dfd
  cgzones

  committed
  21f6dfd

• selinux: more strict bounds check

  Show description for 5caf311
  cgzones

  committed
  5caf311

• selinux: check for simple types

  Show description for a1c6ee0
  cgzones

  committed
  a1c6ee0

• selinux: restrict policy strings

  Show description for 6a550ad
  cgzones

  committed
  6a550ad