Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1668669
| Path | csiph.com!feeder.erje.net!2.eu.feeder.erje.net!news.unit0.net!news.panservice.it!diesel.cu.mi.it!bofh.it!news.nic.it!robomod |
|---|---|
| From | Luis Ressel <aranea@aixah.de> |
| Newsgroups | linux.kernel |
| Subject | [PATCH] selinux: Assign proper class to PF_UNIX/SOCK_RAW sockets |
| Date | Mon, 19 Jun 2017 00:30:01 +0200 |
| Message-ID | <tTQRH-2AF-17@gated-at.bofh.it> (permalink) |
| X-Original-To | Paul Moore <paul@paul-moore.com>, Stephen Smalley <sds@tycho.nsa.gov>, Eric Paris <eparis@parisplace.org>, James Morris <james.l.morris@oracle.com>, "Serge E. Hallyn" <serge@hallyn.com>, selinux@tycho.nsa.gov (moderated list:SELINUX SECURITY MODULE), linux-security-module@vger.kernel.org (open list:SECURITY SUBSYSTEM), linux-kernel@vger.kernel.org (open list) |
| X-Greylist | delayed 2522 seconds by postgrey-1.27 at vger.kernel.org; Sun, 18 Jun 2017 18:27:57 EDT |
| X-Mailer | git-send-email 2.13.1 |
| X-Bounce-Key | webpack.hosteurope.de;aranea@aixah.de;1497824878;ca8d3827; |
| X-He-Smsgid | 1dMi11-0004Dm-MK |
| Sender | robomod@news.nic.it |
| List-ID | <linux-kernel.vger.kernel.org> |
| X-Mailing-List | linux-kernel@vger.kernel.org |
| Approved | robomod@news.nic.it |
| Lines | 20 |
| Organization | linux.* mail to news gateway |
| X-Original-Date | Sun, 18 Jun 2017 23:45:32 +0200 |
| X-Original-Message-ID | <20170618214532.3031-1-aranea@aixah.de> |
| X-Original-Sender | linux-kernel-owner@vger.kernel.org |
| Xref | csiph.com linux.kernel:1668669 |
Show key headers only | View raw
For PF_UNIX, SOCK_RAW is synonymous with SOCK_DGRAM (cf. net/unix/af_unix.c). This is a tad obscure, but libpcap uses it. --- security/selinux/hooks.c | 1 + 1 file changed, 1 insertion(+) diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index 819fd6858b49..1a331fba4a3c 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -1275,6 +1275,7 @@ static inline u16 socket_type_to_security_class(int family, int type, int protoc case SOCK_SEQPACKET: return SECCLASS_UNIX_STREAM_SOCKET; case SOCK_DGRAM: + case SOCK_RAW: return SECCLASS_UNIX_DGRAM_SOCKET; } break; -- 2.13.1
Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread
[PATCH] selinux: Assign proper class to PF_UNIX/SOCK_RAW sockets Luis Ressel <aranea@aixah.de> - 2017-06-19 00:30 +0200 Re: [PATCH] selinux: Assign proper class to PF_UNIX/SOCK_RAW sockets Stephen Smalley <sds@tycho.nsa.gov> - 2017-06-19 22:10 +0200
csiph-web