Paul Moore eeef0d9fd4 selinux: properly handle multiple messages in selinux_netlink_send() ...

commit fb73974172ffaaf57a7c42f35424d9aece1a5af6 upstream.

Fix the SELinux netlink_send hook to properly handle multiple netlink
messages in a single sk_buff; each message is parsed and subject to
SELinux access control.  Prior to this patch, SELinux only inspected
the first message in the sk_buff.

Cc: stable@vger.kernel.org
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Reviewed-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-05-06 08:15:17 +02:00

..

include

selinux: fall back to ref-walk if audit is required

2020-02-14 16:34:20 -05:00

ss

selinux/stable-5.4 PR 20191007

2019-10-08 10:51:37 -07:00

.gitignore

…

avc.c

selinux: ensure we cleanup the internal AVC counters on error in avc_update()

2020-02-24 08:36:39 +01:00

hooks.c

selinux: properly handle multiple messages in selinux_netlink_send()

2020-05-06 08:15:17 +02:00

ibpkey.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295

2019-06-05 17:36:38 +02:00

Kconfig

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

Makefile

SELinux: Remove unused selinux_is_enabled

2019-01-08 13:18:44 -08:00

netif.c

selinux/stable-5.4 PR 20190917

2019-09-23 11:21:04 -07:00

netlabel.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13

2019-05-21 11:28:45 +02:00

netlink.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

netnode.c

selinux/stable-5.4 PR 20190917

2019-09-23 11:21:04 -07:00

netport.c

selinux/stable-5.4 PR 20190917

2019-09-23 11:21:04 -07:00

nlmsgtab.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-06-22 08:59:24 -04:00

selinuxfs.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

xfrm.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00