[PATCH] fix se_sen audit filter

Fix a broken comparison that causes the process clearance to be checked for both se_clr and se_sen audit filters. Signed-off-by: Darrel Goeddel <[email protected]> Signed-off-by: Al Viro <[email protected]>
chewitt · Jun 20, 2006 · 8ba8e0f · 8ba8e0f
1 parent 014149c
commit 8ba8e0f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/security/selinux/ss/services.c b/security/selinux/ss/services.c
@@ -1980,7 +1980,7 @@ int selinux_audit_rule_match(u32 ctxid, u32 field, u32 op,
 		break;
 	case AUDIT_SE_SEN:
 	case AUDIT_SE_CLR:
-		level = (op == AUDIT_SE_SEN ?
+		level = (field == AUDIT_SE_SEN ?
 		         &ctxt->range.level[0] : &ctxt->range.level[1]);
 		switch (op) {
 		case AUDIT_EQUAL: