lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <20250610172226.1470741-42-stephen.smalley.work@gmail.com> Date: Tue, 10 Jun 2025 13:22:12 -0400 From: Stephen Smalley <stephen.smalley.work@...il.com> To: selinux@...r.kernel.org Cc: paul@...l-moore.com, omosnace@...hat.com, netdev@...r.kernel.org, Stephen Smalley <stephen.smalley.work@...il.com> Subject: [PATCH v4 41/42] selinux: convert nlmsg_sock_has_extended_perms() to namespace-aware Convert nlmsg_sock_has_extended_perms() to use the cred_has_extended_perms() helper for namespace-aware checking. Signed-off-by: Stephen Smalley <stephen.smalley.work@...il.com> --- security/selinux/hooks.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index c5ab227e0ffe..6343479f99a0 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -6273,9 +6273,9 @@ static int nlmsg_sock_has_extended_perms(struct sock *sk, u32 perms, u16 nlmsg_t driver = nlmsg_type >> 8; xperm = nlmsg_type & 0xff; - return avc_has_extended_perms(current_selinux_state, current_sid(), - sksec->sid, sksec->sclass, perms, - driver, AVC_EXT_NLMSG, xperm, &ad); + return cred_has_extended_perms(current_cred(), sksec->sid, + sksec->sclass, perms, driver, + AVC_EXT_NLMSG, xperm, &ad); } static int selinux_netlink_send(struct sock *sk, struct sk_buff *skb) -- 2.49.0
Powered by blists - more mailing lists