Files
kernel_arpi/include/uapi/linux
Eugene Syromiatnikov 844f7eaaed include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage
Commit 2d151d3907 ("xfrm: Add possibility to set the default to block
if we have no policy") broke ABI by changing the value of the XFRM_MSG_MAPPING
enum item, thus also evading the build-time check
in security/selinux/nlmsgtab.c:selinux_nlmsg_lookup for presence of proper
security permission checks in nlmsg_xfrm_perms.  Fix it by placing
XFRM_MSG_SETDEFAULT/XFRM_MSG_GETDEFAULT to the end of the enum, right before
__XFRM_MSG_MAX, and updating the nlmsg_xfrm_perms accordingly.

Fixes: 2d151d3907 ("xfrm: Add possibility to set the default to block if we have no policy")
References: https://lore.kernel.org/netdev/20210901151402.GA2557@altlinux.org/
Signed-off-by: Eugene Syromiatnikov <esyr@redhat.com>
Acked-by: Antony Antony <antony.antony@secunet.com>
Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
2021-09-14 10:31:35 +02:00
..
2021-01-25 18:44:44 +01:00
2021-08-17 11:47:53 -04:00
2020-12-28 14:21:31 +00:00
2021-02-09 10:58:19 +01:00
2021-06-10 20:59:05 -04:00
2021-08-25 10:37:05 -07:00
2021-03-04 17:58:15 -08:00
2021-08-23 13:19:09 +02:00
2021-08-23 13:19:09 +02:00
2021-08-10 13:32:40 -04:00
2021-02-08 13:01:24 +01:00
2021-06-03 15:31:34 -07:00
2021-02-26 09:41:03 -08:00
2021-05-21 15:03:50 +02:00
2021-03-10 09:34:06 +01:00
2021-07-29 15:06:50 +01:00
2021-08-18 10:10:01 +01:00
2021-07-06 10:37:46 -05:00
2021-01-16 23:19:26 +01:00
2021-03-10 09:34:06 +01:00
2021-06-23 12:56:08 -07:00
2021-01-07 16:17:32 +01:00
2021-06-12 13:16:45 -07:00