1 files changed, 3 insertions, 0 deletions

diff --git a/security/smack/smack_access.c b/security/smack/smack_access.c
index 58564195bb09..ac0a2707f6d4 100644
--- a/security/smack/smack_access.c
+++ b/security/smack/smack_access.c
@@ -261,6 +261,9 @@ char *smk_import(const char *string, int len)
 {
         struct smack_known *skp;
 
+        /* labels cannot begin with a '-' */
+        if (string[0] == '-')
+                return NULL;
         skp = smk_import_entry(string, len);
         if (skp == NULL)
                 return NULL;