[SELINUX]: Update for tcp_diag rename to inet_diag.
Also, support dccp sockets. Signed-off-by: James Morris <jmorris@namei.org> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
066286071d
commit
216efaaaa0
2 changed files with 3 additions and 2 deletions
|
@ -659,7 +659,7 @@ static inline u16 socket_type_to_security_class(int family, int type, int protoc
|
||||||
return SECCLASS_NETLINK_ROUTE_SOCKET;
|
return SECCLASS_NETLINK_ROUTE_SOCKET;
|
||||||
case NETLINK_FIREWALL:
|
case NETLINK_FIREWALL:
|
||||||
return SECCLASS_NETLINK_FIREWALL_SOCKET;
|
return SECCLASS_NETLINK_FIREWALL_SOCKET;
|
||||||
case NETLINK_TCPDIAG:
|
case NETLINK_INET_DIAG:
|
||||||
return SECCLASS_NETLINK_TCPDIAG_SOCKET;
|
return SECCLASS_NETLINK_TCPDIAG_SOCKET;
|
||||||
case NETLINK_NFLOG:
|
case NETLINK_NFLOG:
|
||||||
return SECCLASS_NETLINK_NFLOG_SOCKET;
|
return SECCLASS_NETLINK_NFLOG_SOCKET;
|
||||||
|
|
|
@ -16,7 +16,7 @@
|
||||||
#include <linux/rtnetlink.h>
|
#include <linux/rtnetlink.h>
|
||||||
#include <linux/if.h>
|
#include <linux/if.h>
|
||||||
#include <linux/netfilter_ipv4/ip_queue.h>
|
#include <linux/netfilter_ipv4/ip_queue.h>
|
||||||
#include <linux/tcp_diag.h>
|
#include <linux/inet_diag.h>
|
||||||
#include <linux/xfrm.h>
|
#include <linux/xfrm.h>
|
||||||
#include <linux/audit.h>
|
#include <linux/audit.h>
|
||||||
|
|
||||||
|
@ -76,6 +76,7 @@ static struct nlmsg_perm nlmsg_firewall_perms[] =
|
||||||
static struct nlmsg_perm nlmsg_tcpdiag_perms[] =
|
static struct nlmsg_perm nlmsg_tcpdiag_perms[] =
|
||||||
{
|
{
|
||||||
{ TCPDIAG_GETSOCK, NETLINK_TCPDIAG_SOCKET__NLMSG_READ },
|
{ TCPDIAG_GETSOCK, NETLINK_TCPDIAG_SOCKET__NLMSG_READ },
|
||||||
|
{ DCCPDIAG_GETSOCK, NETLINK_TCPDIAG_SOCKET__NLMSG_READ },
|
||||||
};
|
};
|
||||||
|
|
||||||
static struct nlmsg_perm nlmsg_xfrm_perms[] =
|
static struct nlmsg_perm nlmsg_xfrm_perms[] =
|
||||||
|
|
Loading…
Reference in a new issue