Eugene Syromiatnikov 844f7eaaed include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage ... Commit 2d151d3907 ("xfrm: Add possibility to set the default to block if we have no policy") broke ABI by changing the value of the XFRM_MSG_MAPPING enum item, thus also evading the build-time check in security/selinux/nlmsgtab.c:selinux_nlmsg_lookup for presence of proper security permission checks in nlmsg_xfrm_perms. Fix it by placing XFRM_MSG_SETDEFAULT/XFRM_MSG_GETDEFAULT to the end of the enum, right before __XFRM_MSG_MAX, and updating the nlmsg_xfrm_perms accordingly. Fixes: 2d151d3907 ("xfrm: Add possibility to set the default to block if we have no policy") References: https://lore.kernel.org/netdev/20210901151402.GA2557@altlinux.org/ Signed-off-by: Eugene Syromiatnikov <esyr@redhat.com> Acked-by: Antony Antony <antony.antony@secunet.com> Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2021-09-14 10:31:35 +02:00
..
include	mctp: Add MCTP base	2021-07-29 15:06:49 +01:00
ss	Merge tag 'selinux-pr-20210830' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux	2021-08-31 12:53:34 -07:00
.gitignore	.gitignore: add SPDX License Identifier	2020-03-25 11:50:48 +01:00
avc.c	selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit()	2021-06-11 13:11:45 -04:00
hooks.c	Core:	2021-08-31 16:43:06 -07:00
ibpkey.c	selinux: remove unused global variables	2021-01-12 09:49:01 -05:00
ima.c	ima: Add digest and digest_len params to the functions to measure a buffer	2021-07-23 09:27:02 -04:00
Kconfig	Documentation,selinux: deprecate setting checkreqprot to 1	2020-02-10 10:49:01 -05:00
Makefile	selinux: include a consumer of the new IMA critical data hook	2021-01-14 23:41:46 -05:00
netif.c	selinux: remove unused global variables	2021-01-12 09:49:01 -05:00
netlabel.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13	2019-05-21 11:28:45 +02:00
netlink.c	selinux: mark some global variables __ro_after_init	2021-01-12 10:08:55 -05:00
netnode.c	selinux: remove unused global variables	2021-01-12 09:49:01 -05:00
netport.c	selinux: remove unused global variables	2021-01-12 09:49:01 -05:00
nlmsgtab.c	include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage	2021-09-14 10:31:35 +02:00
selinuxfs.c	selinux/stable-5.13 PR 20210426	2021-04-27 13:42:11 -07:00
status.c	selinux: move status variables out of selinux_ss	2020-02-10 10:49:01 -05:00
xfrm.c	selinux: delete selinux_xfrm_policy_lookup() useless argument	2021-05-10 21:38:31 -04:00