c081d53f97
This patch is to move secid and peer_secid from endpoint to association,
and pass asoc to sctp_assoc_request and sctp_sk_clone instead of ep. As
ep is the local endpoint and asoc represents a connection, and in SCTP
one sk/ep could have multiple asoc/connection, saving secid/peer_secid
for new asoc will overwrite the old asoc's.
Note that since asoc can be passed as NULL, security_sctp_assoc_request()
is moved to the place right after the new_asoc is created in
sctp_sf_do_5_1B_init() and sctp_sf_do_unexpected_init().
v1->v2:
- fix the description of selinux_netlbl_skbuff_setsid(), as Jakub noticed.
- fix the annotation in selinux_sctp_assoc_request(), as Richard Noticed.
Fixes:
|
||
---|---|---|
.. | ||
keys | ||
tpm | ||
credentials.rst | ||
digsig.rst | ||
IMA-templates.rst | ||
index.rst | ||
landlock.rst | ||
lsm-development.rst | ||
lsm.rst | ||
sak.rst | ||
SCTP.rst | ||
self-protection.rst | ||
siphash.rst |