Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Mickaël Salaün 86a7c9ba83 selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket ... [ Upstream commit bbf5a1d0e5d0fb3bdf90205aa872636122692a50 ] The IPv6 network stack first checks the sockaddr length (-EINVAL error) before checking the family (-EAFNOSUPPORT error). This was discovered thanks to commit a549d055a22e ("selftests/landlock: Add network tests"). Cc: Eric Paris <eparis@parisplace.org> Cc: Konstantin Meskhidze <konstantin.meskhidze@huawei.com> Cc: Paul Moore <paul@paul-moore.com> Cc: Stephen Smalley <stephen.smalley.work@gmail.com> Reported-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Closes: https://lore.kernel.org/r/0584f91c-537c-4188-9e4f-04f192565667@collabora.com Fixes: 0f8db8cc73 ("selinux: add AF_UNSPEC and INADDR_ANY checks to selinux_socket_bind()") Signed-off-by: Mickaël Salaün <mic@digikod.net> Tested-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-01-25 14:34:23 -08:00
..
include
ss	selinux: Add boundary check in put_entry()	2022-08-25 11:17:32 +02:00
.gitignore
avc.c
hooks.c	selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket	2024-01-25 14:34:23 -08:00
ibpkey.c
Kconfig
Makefile	selinux: don't use make's grouped targets feature yet	2023-06-09 10:29:02 +02:00
netif.c
netlabel.c
netlink.c
netnode.c
netport.c
nlmsgtab.c
selinuxfs.c
xfrm.c