]> git.baikalelectronics.ru Git - kernel.git/commit
net,lsm,selinux: revert the security_sctp_assoc_established() hook
authorPaul Moore <paul@paul-moore.com>
Fri, 12 Nov 2021 23:18:10 +0000 (18:18 -0500)
committerDavid S. Miller <davem@davemloft.net>
Sun, 14 Nov 2021 12:21:53 +0000 (12:21 +0000)
commit003fbfff5d88341f631bc926efa665dcee2bbd7b
tree4eea6531e19576f50262897e2a673b2f9efff056
parent57f0495fad0cdea721c36ca269684faa010c2f0b
net,lsm,selinux: revert the security_sctp_assoc_established() hook

This patch reverts two prior patches, a24d3558bf37
("security: implement sctp_assoc_established hook in selinux") and
d7c5f571a7b9 ("security: add sctp_assoc_established hook"), which
create the security_sctp_assoc_established() LSM hook and provide a
SELinux implementation.  Unfortunately these two patches were merged
without proper review (the Reviewed-by and Tested-by tags from
Richard Haines were for previous revisions of these patches that
were significantly different) and there are outstanding objections
from the SELinux maintainers regarding these patches.

Work is currently ongoing to correct the problems identified in the
reverted patches, as well as others that have come up during review,
but it is unclear at this point in time when that work will be ready
for inclusion in the mainline kernel.  In the interest of not keeping
objectionable code in the kernel for multiple weeks, and potentially
a kernel release, we are reverting the two problematic patches.

Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Documentation/security/SCTP.rst
include/linux/lsm_hook_defs.h
include/linux/lsm_hooks.h
include/linux/security.h
net/sctp/sm_statefuns.c
security/security.c
security/selinux/hooks.c