• Stephen Smalley's avatar
    selinux: fix endianness bug in network node address handling · 59dbd1ba
    Stephen Smalley authored
    Fix an endianness bug in the handling of network node addresses by
    SELinux.  This yields no change on little endian hardware but fixes
    the incorrect handling on big endian hardware.  The network node
    addresses are stored in network order in memory by checkpolicy, not in
    cpu/host order, and thus should not have cpu_to_le32/le32_to_cpu
    conversions applied upon policy write/read unlike other data in the
    policy.
    
    Bug reported by John Weeks of Sun, who noticed that binary policy
    files built from the same policy source on x86 and sparc differed and
    tracked it down to the ipv4 address handling in checkpolicy.
    Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
    Signed-off-by: default avatarJames Morris <jmorris@namei.org>
    59dbd1ba
policydb.c 39.9 KB