You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Joy Latten 4aa2e62c45 xfrm: Add security check before flushing SAD/SPD ... Currently we check for permission before deleting entries from SAD and SPD, (see security_xfrm_policy_delete() security_xfrm_state_delete()) However we are not checking for authorization when flushing the SPD and the SAD completely. It was perhaps missed in the original security hooks patch. This patch adds a security check when flushing entries from the SAD and SPD. It runs the entire database and checks each entry for a denial. If the process attempting the flush is unable to remove all of the entries a denial is logged the the flush function returns an error without removing anything. This is particularly useful when a process may need to create or delete its own xfrm entries used for things like labeled networking but that same process should not be able to delete other entries or flush the entire database. Signed-off-by: Joy Latten<latten@austin.ibm.com> Signed-off-by: Eric Paris <eparis@parisplace.org> Signed-off-by: James Morris <jmorris@namei.org>		18 years ago
..
802	…
8021q	…
appletalk	…
atm	…
ax25	…
bluetooth	…
bridge	…
core	[NET]: Avoid duplicate netlink notification when changing link state	18 years ago
dccp	…
decnet	[NETLINK]: Mark netlink policies const	18 years ago
econet	…
ethernet	…
ieee80211	…
ipv4	[UDP]: Revert 2-pass hashing changes.	18 years ago
ipv6	[UDP]: Revert 2-pass hashing changes.	18 years ago
ipx	…
irda	…
iucv	…
key	xfrm: Add security check before flushing SAD/SPD	18 years ago
lapb	…
llc	…
mac80211	…
netfilter	[NETFILTER]: nf_conntrack_amanda: fix textsearch_prepare() error check	18 years ago
netlabel	[NETLINK]: Mark netlink policies const	18 years ago
netlink	[NETLINK]: Mark netlink policies const	18 years ago
netrom	…
packet	…
rfkill	…
rose	…
rxrpc	…
sched	[NET_SCHED]: Fix filter double free	18 years ago
sctp	…
sunrpc	…
tipc	…
unix	[AF_UNIX]: Fix stream recvmsg() race.	18 years ago
wanrouter	…
wireless	…
x25	…
xfrm	xfrm: Add security check before flushing SAD/SPD	18 years ago
Kconfig	…
Makefile	…
TUNABLE	…
compat.c	…
nonet.c	…
socket.c	…
sysctl_net.c	…