Mikhail Ivanov 034294fbfd selinux: Fix SCTP error inconsistency in selinux_socket_bind() ...

Check sk->sk_protocol instead of security class to recognize SCTP socket.
SCTP socket is initialized with SECCLASS_SOCKET class if policy does not
support EXTSOCKCLASS capability. In this case bind(2) hook wrongfully
return EAFNOSUPPORT instead of EINVAL.

The inconsistency was detected with help of Landlock tests:
https://lore.kernel.org/all/b58680ca-81b2-7222-7287-0ac7f4227c3c@huawei-partners.com/

Fixes: 0f8db8cc73 ("selinux: add AF_UNSPEC and INADDR_ANY checks to selinux_socket_bind()")
Signed-off-by: Mikhail Ivanov <ivanov.mikhail1@huawei-partners.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2024-12-11 14:57:47 -05:00

..

apparmor

apparmor: lift new_profile declaration to remove C23 extension warning

2024-11-26 19:21:06 -08:00

bpf

bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0

2024-09-11 10:11:36 -07:00

integrity

Merge tag 'lsm-pr-20241129' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm

2024-11-30 18:14:56 -08:00

ipe

ipe: fallback to platform keyring also if key in trusted keyring is rejected

2024-10-18 12:14:53 -07:00

keys

KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation

2024-11-04 21:24:24 +02:00

landlock

Merge tag 'pull-fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2024-11-18 12:24:06 -08:00

loadpin

fdget(), more trivial conversions

2024-11-03 01:28:06 -05:00

lockdown

lockdown: Make lockdown_lsmid static

2024-08-15 12:11:42 -04:00

safesetid

lsm: mark the lsm_id variables are marked as static

2023-11-12 22:54:42 -05:00

selinux

selinux: Fix SCTP error inconsistency in selinux_socket_bind()

2024-12-11 14:57:47 -05:00

smack

lsm: remove lsm_prop scaffolding

2024-10-11 14:34:16 -04:00

tomoyo

tomoyo: revert CONFIG_SECURITY_TOMOYO_LKM support

2024-10-04 11:41:22 -04:00

yama

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

commoncap.c

lsm: Refactor return value of LSM hook vm_enough_memory

2024-07-31 14:46:51 -04:00

device_cgroup.c

device_cgroup: Fix kernel-doc warnings in device_cgroup

2023-06-21 09:30:49 -04:00

inode.c

lsm: Use IS_ERR_OR_NULL() helper function

2024-08-29 11:12:13 -04:00

Kconfig

Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm

2024-09-16 18:19:47 +02:00

Kconfig.hardening

hardening: Adjust dependencies in selection of MODVERSIONS

2024-09-28 13:56:03 -07:00

lsm_audit.c

security: replace memcpy() with get_task_comm()

2024-11-05 17:12:29 -08:00

lsm_syscalls.c

lsm: use 32-bit compatible data types in LSM syscalls

2024-03-14 11:31:26 -04:00

Makefile

lsm: add IPE lsm

2024-08-19 22:36:26 -04:00

min_addr.c

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

security.c

Merge tag 'fsnotify_for_v6.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs

2024-11-21 09:55:45 -08:00