Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b252eaba authored by Lorenzo Colitti's avatar Lorenzo Colitti Committed by Subash Abhinov Kasiviswanathan
Browse files

selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tables 

Without this, using SOCK_DESTROY in enforcing mode results in:

  SELinux: unrecognized netlink message type=21 for sclass=32

CRs-Fixed: 1084190
Change-Id: I7862bb0fc83573567243ffa9549a2c7405b5986c
Git-commit: 2c332426b5af4edf921d064b183da76c1ae2fda6
Git-repo: https://android.googlesource.com/kernel/common/


Signed-off-by: default avatarSubash Abhinov Kasiviswanathan <subashab@codeaurora.org>
parent 015c20d6

security/selinux/nlmsgtab.c

+4 −3
Original line number Diff line number Diff line
@@ -83,6 +83,7 @@ static struct nlmsg_perm nlmsg_tcpdiag_perms[] = 
	{ TCPDIAG_GETSOCK,		NETLINK_TCPDIAG_SOCKET__NLMSG_READ },

	{ DCCPDIAG_GETSOCK,		NETLINK_TCPDIAG_SOCKET__NLMSG_READ },

	{ SOCK_DIAG_BY_FAMILY,		NETLINK_TCPDIAG_SOCKET__NLMSG_READ },

	{ SOCK_DESTROY_BACKPORT,	NETLINK_TCPDIAG_SOCKET__NLMSG_WRITE },

};



static struct nlmsg_perm nlmsg_xfrm_perms[] =