Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e85e85c8 authored by David S. Miller's avatar David S. Miller
Browse files

Merge branch 'selinux-nlmsg' 



Nicolas Dichtel says:

====================
selinux: add some missing nlmsg commands

It's not a critical issue, thus the patches are based on net-next.

Patches are splitted because the 'Fixes' tag is not the same for all
commands.
====================
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parents 5f9755d2 5b5800fa

security/selinux/nlmsgtab.c

+7 −0
Original line number Diff line number Diff line
@@ -73,6 +73,9 @@ static struct nlmsg_perm nlmsg_route_perms[] = 
	{ RTM_NEWMDB,		NETLINK_ROUTE_SOCKET__NLMSG_WRITE },

	{ RTM_DELMDB,		NETLINK_ROUTE_SOCKET__NLMSG_WRITE  },

	{ RTM_GETMDB,		NETLINK_ROUTE_SOCKET__NLMSG_READ  },

	{ RTM_NEWNSID,		NETLINK_ROUTE_SOCKET__NLMSG_WRITE },

	{ RTM_DELNSID,		NETLINK_ROUTE_SOCKET__NLMSG_READ  },

	{ RTM_GETNSID,		NETLINK_ROUTE_SOCKET__NLMSG_READ  },

};



static struct nlmsg_perm nlmsg_tcpdiag_perms[] =
@@ -100,6 +103,10 @@ static struct nlmsg_perm nlmsg_xfrm_perms[] = 
	{ XFRM_MSG_FLUSHPOLICY,	NETLINK_XFRM_SOCKET__NLMSG_WRITE },

	{ XFRM_MSG_NEWAE,	NETLINK_XFRM_SOCKET__NLMSG_WRITE },

	{ XFRM_MSG_GETAE,	NETLINK_XFRM_SOCKET__NLMSG_READ  },

	{ XFRM_MSG_NEWSADINFO,	NETLINK_XFRM_SOCKET__NLMSG_READ  },

	{ XFRM_MSG_GETSADINFO,	NETLINK_XFRM_SOCKET__NLMSG_READ  },

	{ XFRM_MSG_NEWSPDINFO,	NETLINK_XFRM_SOCKET__NLMSG_WRITE },

	{ XFRM_MSG_GETSPDINFO,	NETLINK_XFRM_SOCKET__NLMSG_READ  },

};



static struct nlmsg_perm nlmsg_audit_perms[] =