Re: [PATCH] lsm,selinux: pass flowi_common instead of flowi to the LSM hooks

On Thu, Nov 19, 2020 at 10:02 PM James Morris [off-list ref] wrote:

On Thu, 19 Nov 2020, Paul Moore wrote:

quoted

As pointed out by Herbert in a recent related patch, the LSM hooks do
not have the necessary address family information to use the flowi
struct safely.  As none of the LSMs currently use any of the protocol
specific flowi information, replace the flowi pointers with pointers
to the address family independent flowi_common struct.

Reported-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Paul Moore <paul@paul-moore.com>

Acked-by: James Morris <redacted>

Thanks.  Seeing no further comments or objections, and given the
discussion in the previous draft of the patch, I've gone again and
merged this into selinux/next.

-- 
paul moore
www.paul-moore.com