iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/dccp
History
Kuniyuki Iwashima fa2df45af1 dccp: Call security_inet_conn_request() after setting IPv4 addresses. 
Initially, commit 4237c75c0a35 ("[MLSXFRM]: Auto-labeling of child
sockets") introduced security_inet_conn_request() in some functions
where reqsk is allocated.  The hook is added just after the allocation,
so reqsk's IPv4 remote address was not initialised then.

However, SELinux/Smack started to read it in netlbl_req_setattr()
after the cited commits.

This bug was partially fixed by commit 284904aa7946 ("lsm: Relocate
the IPv4 security_inet_conn_request() hooks").

This patch fixes the last bug in DCCPv4.

Fixes: 389fb800ac8b ("netlabel: Label incoming TCP connections correctly in SELinux")
Fixes: 07feee8f812f ("netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connections")
Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Acked-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
2023-11-02 12:55:42 +01:00
..
ccids
dccp: tfrc: fix doc warnings in tfrc_equation.c
2021-06-10 14:08:49 -07:00
ackvec.c
net: dccp: Fix most of the kerneldoc warnings
2020-10-30 12:08:54 -07:00
ackvec.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
ccid.c
net: dccp: Add __printf() markup to fix -Wsuggest-attribute=format
2020-10-30 11:31:46 -07:00
ccid.h
net: dccp: Replace zero-length array with flexible-array member
2020-02-28 12:08:37 -08:00
dccp.h
net: ioctl: Use kernel memory on protocol ioctl callbacks
2023-06-15 22:33:26 -07:00
diag.c
inet_diag: Move the INET_DIAG_REQ_BYTECODE nlattr to cb->data
2020-02-27 18:50:19 -08:00
feat.c
dccp: Return the correct errno code
2021-02-06 11:15:28 -08:00
feat.h
dccp: Remove unused declaration dccp_feat_initialise_sysctls()
2023-07-27 17:16:26 -07:00
input.c
net: dccp: Convert to use the preferred fallthrough macro
2020-08-22 12:38:34 -07:00
ipv4.c
dccp: Call security_inet_conn_request() after setting IPv4 addresses.
2023-11-02 12:55:42 +01:00
ipv6.c
net: implement lockless SO_PRIORITY
2023-10-01 19:09:54 +01:00
ipv6.h
ipv6: remove hard coded limitation on ipv6_pinfo
2023-07-24 09:39:31 +01:00
Kconfig
dccp: Replace HTTP links with HTTPS ones
2020-07-13 11:54:07 -07:00
Makefile
net: dccp: Remove dccpprobe module
2018-01-02 14:27:30 -05:00
minisocks.c
tcp: allocate tcp_death_row outside of struct netns_ipv4
2022-01-26 19:00:31 -08:00
options.c
net: dccp: Convert to use the preferred fallthrough macro
2020-08-22 12:38:34 -07:00
output.c
dccp: fix data-race around dp->dccps_mss_cache
2023-08-04 18:27:58 -07:00
proto.c
dccp: annotate data-races in dccp_poll()
2023-08-18 19:30:24 -07:00
qpolicy.c
net: dccp: Fix most of the kerneldoc warnings
2020-10-30 12:08:54 -07:00
sysctl.c
proc/sysctl: add shared variables for range check
2019-07-18 17:08:07 -07:00
timer.c
tcp: record last received ipv6 flowlabel
2023-10-10 10:02:59 +02:00
trace.h
net: dccp: Use memset_startat() for TP zeroing
2021-11-19 11:22:49 +00:00