Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 47be4c18 authored by Lorenzo Colitti's avatar Lorenzo Colitti
Browse files

selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tables 

Without this, using SOCK_DESTROY in enforcing mode results in:

  SELinux: unrecognized netlink message type=21 for sclass=32

Change-Id: I7862bb0fc83573567243ffa9549a2c7405b5986c
parent 69649c8a

security/selinux/nlmsgtab.c

+4 −3
Original line number Diff line number Diff line
@@ -80,6 +80,7 @@ static struct nlmsg_perm nlmsg_tcpdiag_perms[] = 
	{ TCPDIAG_GETSOCK,		NETLINK_TCPDIAG_SOCKET__NLMSG_READ },

	{ DCCPDIAG_GETSOCK,		NETLINK_TCPDIAG_SOCKET__NLMSG_READ },

	{ SOCK_DIAG_BY_FAMILY,		NETLINK_TCPDIAG_SOCKET__NLMSG_READ },

	{ SOCK_DESTROY_BACKPORT,	NETLINK_TCPDIAG_SOCKET__NLMSG_WRITE },

};



static struct nlmsg_perm nlmsg_xfrm_perms[] =