mac_mls (fwd)

[Richard Kojedzinszky]

Kojedzinszky Richard
Euronet Magyarorszag Informatikai Zrt.

---------- Forwarded message ----------
Date: Sat, 28 Apr 2012 23:24:06 +0200 (CEST)
From: Richard Kojedzinszky <krichy at tvnetwork.hu>
To: freebsd-security at freebsd.org
Subject: mac_mls

Dear fbsd team,

I am using 9.0, and found that running atop, and exiting from it when the 
kernel is compiled with MAC_MLS (or the module is loaded), then a panic raises, 
I think the following patch could fix it (as in mac_biba);

--- sys/security/mac_mls/mac_mls.c.orig	2012-04-28 23:19:45.000000000 +0200
+++ sys/security/mac_mls/mac_mls.c	2012-04-28 23:20:13.000000000 +0200
@@ -2028,6 +2028,9 @@
  	if (!mls_enabled)
  		return (0);

+	if (vplabel == NULL)
+		return (0);
+
  	subj = SLOT(cred->cr_label);
  	obj = SLOT(vplabel);

Regards,

Kojedzinszky Richard
Euronet Magyarorszag Informatikai Zrt.