Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit eea41348 authored by Stephen Smalley's avatar Stephen Smalley Committed by Gerrit - the friendly Code Review server
Browse files

selinux: update netlink socket classes



Update the set of SELinux netlink socket class definitions to match
the set of netlink protocols implemented by the kernel.  The
ip_queue implementation for the NETLINK_FIREWALL and NETLINK_IP6_FW protocols
was removed in d16cf20e, so we can remove
the corresponding class definitions as this is dead code.  Add new
classes for NETLINK_ISCSI, NETLINK_FIB_LOOKUP, NETLINK_CONNECTOR,
NETLINK_NETFILTER, NETLINK_GENERIC, NETLINK_SCSITRANSPORT, NETLINK_RDMA,
and NETLINK_CRYPTO so that we can distinguish among sockets created
for each of these protocols.  This change does not define the finer-grained
nlsmsg_read/write permissions or map specific nlmsg_type values to those
permissions in the SELinux nlmsgtab; if finer-grained control of these
sockets is desired/required, that can be added as a follow-on change.
We do not define a SELinux class for NETLINK_ECRYPTFS as the implementation
was removed in 624ae528.

Change-Id: I49c819b209d25582a30eb7e47edef7179ee2cb31
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: default avatarPaul Moore <pmoore@redhat.com>
Git-commit: 6c6d2e9bde1c1c87a7ead806f8f5e2181d41a652
Git-repo: https://android.googlesource.com/kernel/common.git


Signed-off-by: default avatarSrinivasarao P <spathi@codeaurora.org>
parent aad29b90
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment