You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Stephen Smalley fdd75ea8df net/tipc: initialize security state for new connection socket ... Calling connect() with an AF_TIPC socket would trigger a series of error messages from SELinux along the lines of: SELinux: Invalid class 0 type=AVC msg=audit(1434126658.487:34500): avc: denied { <unprintable> } for pid=292 comm="kworker/u16:5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=<unprintable> permissive=0 This was due to a failure to initialize the security state of the new connection sock by the tipc code, leaving it with junk in the security class field and an unlabeled secid. Add a call to security_sk_clone() to inherit the security state from the parent socket. Reported-by: Tim Shearer <tim.shearer@overturenetworks.com> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: Paul Moore <paul@paul-moore.com> Acked-by: Ying Xue <ying.xue@windriver.com> Signed-off-by: David S. Miller <davem@davemloft.net>		10 years ago
..
Kconfig	…
Makefile	…
addr.c	tipc: simplify include dependencies	10 years ago
addr.h	tipc: simplify include dependencies	10 years ago
bcast.c	tipc: purge backlog queue counters when broadcast link is reset	10 years ago
bcast.h	tipc: add broadcast link window set/get to nl api	10 years ago
bearer.c	tipc: simplify resetting and disabling of bearers	10 years ago
bearer.h	tipc: simplify include dependencies	10 years ago
core.c	tipc: rename functions defined in subscr.c	10 years ago
core.h	tipc: simplify packet sequence number handling	10 years ago
discover.c	tipc: involve reference counter for node structure	10 years ago
discover.h	…
eth_media.c	…
ib_media.c	…
link.c	tipc: purge backlog queue counters when broadcast link is reset	10 years ago
link.h	tipc: purge backlog queue counters when broadcast link is reset	10 years ago
msg.c	tipc: add packet sequence number at instant of transmission	10 years ago
msg.h	tipc: add packet sequence number at instant of transmission	10 years ago
name_distr.c	tipc: involve reference counter for node structure	10 years ago
name_distr.h	…
name_table.c	tipc: rename functions defined in subscr.c	10 years ago
name_table.h	…
net.c	tipc: simplify include dependencies	10 years ago
net.h	…
netlink.c	…
netlink.h	…
netlink_compat.c	tipc: send explicit not supported error in nl compat	10 years ago
node.c	tipc: add packet sequence number at instant of transmission	10 years ago
node.h	tipc: simplify include dependencies	10 years ago
server.c	tipc: use sock_create_kern interface to create kernel socket	10 years ago
server.h	…
socket.c	net/tipc: initialize security state for new connection socket	10 years ago
socket.h	tipc: fix netns refcnt leak	10 years ago
subscr.c	tipc: adjust locking policy of subscription	10 years ago
subscr.h	tipc: rename functions defined in subscr.c	10 years ago
sysctl.c	…
udp_media.c	udp_tunnel: Pass UDP socket down through udp_tunnel{, 6}_xmit_skb().	10 years ago