Commit 08ff924e authored Feb 04, 2016 by Lorenzo Colitti Committed by David S. Miller Feb 09, 2016

selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tables



Without this, using SOCK_DESTROY in enforcing mode results in:

  SELinux: unrecognized netlink message type=21 for sclass=32

Signed-off-by: Lorenzo Colitti <lorenzo@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 7a84bd46

security/selinux/nlmsgtab.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -83,6 +83,7 @@ static struct nlmsg_perm nlmsg_tcpdiag_perms[] =
		{ TCPDIAG_GETSOCK, NETLINK_TCPDIAG_SOCKET__NLMSG_READ },
		{ DCCPDIAG_GETSOCK, NETLINK_TCPDIAG_SOCKET__NLMSG_READ },
		{ SOCK_DIAG_BY_FAMILY, NETLINK_TCPDIAG_SOCKET__NLMSG_READ },
		{ SOCK_DESTROY, NETLINK_TCPDIAG_SOCKET__NLMSG_WRITE },
		};

		static struct nlmsg_perm nlmsg_xfrm_perms[] =