{"push_id":1821380942,"size":1,"distinct_size":1,"ref":"refs/heads/nougat","head":"ea8fb58be95145936e81cc68226475663eba6f77","before":"a7b0d57601b25fc3039025de4a07b6f10688d327","commits":[{"sha":"ea8fb58be95145936e81cc68226475663eba6f77","author":{"name":"Stephen Smalley","email":"a113c662ba7e86bc1a8f97e28bfedcdc6b0de5bd@tycho.nsa.gov"},"message":"UPSTREAM: selinux: fix bug in conditional rules handling\n\n(cherry picked from commit commit f3bef67992e8698897b584616535803887c4a73e)\n\ncommit fa1aa143ac4a (\"selinux: extended permissions for ioctls\")\nintroduced a bug into the handling of conditional rules, skipping the\nprocessing entirely when the caller does not provide an extended\npermissions (xperms) structure.  Access checks from userspace using\n/sys/fs/selinux/access do not include such a structure since that\ninterface does not presently expose extended permission information.\nAs a result, conditional rules were being ignored entirely on userspace\naccess requests, producing denials when access was allowed by\nconditional rules in the policy.  Fix the bug by only skipping\ncomputation of extended permissions in this situation, not the entire\nconditional rules processing.\n\nChange-Id: I24f39e3907d0b00a4194e15a4472e8d859508fa9\nReported-by: Laurent Bigonville <bigon@debian.org>\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>\n[PM: fixed long lines in patch description]\nCc: stable@vger.kernel.org # 4.3\nSigned-off-by: Paul Moore <pmoore@redhat.com>","distinct":true,"url":"https://api.github.com/repos/kishpatel1998/android_kernel_taido_row/commits/ea8fb58be95145936e81cc68226475663eba6f77"}]}
{"actor":{"display_login":"kishpatel1998"}}