| commit | d8db60cb23e49a92cf8cada3297395c7fa50fdf8 | [log] [tgz] |
|---|---|---|
| author | Paul Moore <paul@paul-moore.com> | Mon Dec 09 20:39:46 2019 -0500 |
| committer | Paul Moore <paul@paul-moore.com> | Tue Dec 10 14:16:53 2019 -0500 |
| tree | c35db44612802989e1e84f6ff69c414d6bc858e1 | |
| parent | b2104ac0bd951a2887a03b09e2106fcff5fad94e [diff] |
selinux: ensure we cleanup the internal AVC counters on error in avc_insert()
Fix avc_insert() to call avc_node_kill() if we've already allocated
an AVC node and the code fails to insert the node in the cache.
Fixes: fa1aa143ac4a ("selinux: extended permissions for ioctls")
Reported-by: rsiddoji@codeaurora.org
Suggested-by: Stephen Smalley <sds@tycho.nsa.gov>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>