diff options
| author |   Stephen Smalley <sds@tycho.nsa.gov> | 2015-06-04 16:22:16 -0400 |
|---|---|---|
| committer |   Paul Moore <pmoore@redhat.com> | 2015-06-04 16:22:16 -0400 |
| commit | 6c6d2e9bde1c1c87a7ead806f8f5e2181d41a652 (patch) | |
| tree | a06013e3a14864931b63fcf323b73d4822053957 /security/device_cgroup.c | |
| parent | signals: don't abuse __flush_signals() in selinux_bprm_committed_creds() (diff) | |
| download | linux-dev-6c6d2e9bde1c1c87a7ead806f8f5e2181d41a652.tar.xz linux-dev-6c6d2e9bde1c1c87a7ead806f8f5e2181d41a652.zip | |
selinux: update netlink socket classes
Update the set of SELinux netlink socket class definitions to match
the set of netlink protocols implemented by the kernel. The
ip_queue implementation for the NETLINK_FIREWALL and NETLINK_IP6_FW protocols
was removed in d16cf20e2f2f13411eece7f7fb72c17d141c4a84, so we can remove
the corresponding class definitions as this is dead code. Add new
classes for NETLINK_ISCSI, NETLINK_FIB_LOOKUP, NETLINK_CONNECTOR,
NETLINK_NETFILTER, NETLINK_GENERIC, NETLINK_SCSITRANSPORT, NETLINK_RDMA,
and NETLINK_CRYPTO so that we can distinguish among sockets created
for each of these protocols. This change does not define the finer-grained
nlsmsg_read/write permissions or map specific nlmsg_type values to those
permissions in the SELinux nlmsgtab; if finer-grained control of these
sockets is desired/required, that can be added as a follow-on change.
We do not define a SELinux class for NETLINK_ECRYPTFS as the implementation
was removed in 624ae5284516870657505103ada531c64dba2a9a.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <pmoore@redhat.com>
Diffstat (limited to 'security/device_cgroup.c')
0 files changed, 0 insertions, 0 deletions