]> git.baikalelectronics.ru Git - kernel.git/commit
selinux: handle ICMPv6 consistently with ICMP
authorStephen Smalley <sds@tycho.nsa.gov>
Mon, 9 Jan 2017 15:07:31 +0000 (10:07 -0500)
committerPaul Moore <paul@paul-moore.com>
Mon, 9 Jan 2017 15:07:31 +0000 (10:07 -0500)
commit54bca55f9517bedcb6fcf65b6d795e1fabd531a9
tree0616c8df6684b739648d9b4e38eab11ec7b1c1fd
parent5c9884a1cf041d4a3ee2adb7ed97b988cb21c7a2
selinux: handle ICMPv6 consistently with ICMP

commit 79c8b348f215 ("selinux: support distinctions among all network
address families") mapped datagram ICMP sockets to the new icmp_socket
security class, but left ICMPv6 sockets unchanged.  This change fixes
that oversight to handle both kinds of sockets consistently.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/hooks.c