Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 850b0cee authored by Eric Paris's avatar Eric Paris Committed by James Morris
Browse files

SELinux: define audit permissions for audit tree netlink messages 



Audit trees defined 2 new netlink messages but the netlink mapping tables for
selinux permissions were not set up.  This patch maps these 2 new operations
to AUDIT_WRITE.

Signed-off-by: default avatarEric Paris <eparis@redhat.com>
Signed-off-by: default avatarJames Morris <jmorris@namei.org>
parent fe67e6f2

security/selinux/nlmsgtab.c

+2 −0
Original line number Diff line number Diff line
@@ -112,6 +112,8 @@ static struct nlmsg_perm nlmsg_audit_perms[] = 
	{ AUDIT_DEL_RULE,	NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },

	{ AUDIT_USER,		NETLINK_AUDIT_SOCKET__NLMSG_RELAY    },

	{ AUDIT_SIGNAL_INFO,	NETLINK_AUDIT_SOCKET__NLMSG_READ     },

	{ AUDIT_TRIM,		NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },

	{ AUDIT_MAKE_EQUIV,	NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },

	{ AUDIT_TTY_GET,	NETLINK_AUDIT_SOCKET__NLMSG_READ     },

	{ AUDIT_TTY_SET,	NETLINK_AUDIT_SOCKET__NLMSG_TTY_AUDIT	},

};