Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Mickaël Salaün 86a7c9ba83 selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket ... [ Upstream commit bbf5a1d0e5d0fb3bdf90205aa872636122692a50 ] The IPv6 network stack first checks the sockaddr length (-EINVAL error) before checking the family (-EAFNOSUPPORT error). This was discovered thanks to commit a549d055a22e ("selftests/landlock: Add network tests"). Cc: Eric Paris <eparis@parisplace.org> Cc: Konstantin Meskhidze <konstantin.meskhidze@huawei.com> Cc: Paul Moore <paul@paul-moore.com> Cc: Stephen Smalley <stephen.smalley.work@gmail.com> Reported-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Closes: https://lore.kernel.org/r/0584f91c-537c-4188-9e4f-04f192565667@collabora.com Fixes: 0f8db8cc73 ("selinux: add AF_UNSPEC and INADDR_ANY checks to selinux_socket_bind()") Signed-off-by: Mickaël Salaün <mic@digikod.net> Tested-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-01-25 14:34:23 -08:00
..
apparmor
integrity	ima: detect changes to the backing overlay file	2023-12-08 08:44:27 +01:00
keys	security: keys: perform capable check only on privileged operations	2023-09-23 10:59:39 +02:00
loadpin
lockdown
safesetid
selinux	selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket	2024-01-25 14:34:23 -08:00
smack	Smack:- Use overlay inode label in smack_inode_copy_up()	2023-10-10 21:46:41 +02:00
tomoyo
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c