selinux,smack: properly reference the LSM blob in security_watch_key()
authorPaul Moore <paul@paul-moore.com>
Thu, 19 Sep 2024 15:37:11 +0000 (11:37 -0400)
committerPaul Moore <paul@paul-moore.com>
Thu, 19 Sep 2024 20:37:01 +0000 (16:37 -0400)
commit8a23c9e1ba4642b60420e8caa75859883a509c24
tree5e2355935f9261b1f00c90c234c487207bf59c3f
parentea7e2d5e49c05e5db1922387b09ca74aa40f46e2
selinux,smack: properly reference the LSM blob in security_watch_key()

Unfortunately when we migrated the lifecycle management of the key LSM
blob to the LSM framework we forgot to convert the security_watch_key()
callbacks for SELinux and Smack.  This patch corrects this by making use
of the selinux_key() and smack_key() helper functions respectively.

This patch also removes some input checking in the Smack callback as it
is no longer needed.

Fixes: 5f8d28f6d7d5 ("lsm: infrastructure management of the key security blob")
Reported-by: syzbot+044fdf24e96093584232@syzkaller.appspotmail.com
Tested-by: syzbot+044fdf24e96093584232@syzkaller.appspotmail.com
Reviewed-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/hooks.c
security/smack/smack_lsm.c