linux-next

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git synced 2025-01-12 00:38:55 +00:00

History

Paul Moore 6f96c142f7 selinux: add the "attach_queue" permission to the "tun_socket" class

Add a new permission to align with the new TUN multiqueue support,
"tun_socket:attach_queue".

The corresponding SELinux reference policy patch is show below:

 diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
 index 28802c5..a0664a1 100644
 --- a/policy/flask/access_vectors
 +++ b/policy/flask/access_vectors
 @@ -827,6 +827,9 @@ class kernel_service

  class tun_socket
  inherits socket
 +{
 +       attach_queue
 +}

  class x_pointer
  inherits x_device

Signed-off-by: Paul Moore <pmoore@redhat.com>
Acked-by: Eric Paris <eparis@parisplace.org>
Tested-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2013-01-14 18:16:59 -05:00

apparmor

apparmor: fix IRQ stack overflow during free_profile

2012-10-25 02:12:50 +11:00

integrity

ima: fallback to MODULE_SIG_ENFORCE for existing kernel module syscall

2012-12-24 09:35:48 -05:00

keys

keys: fix unreachable code

2012-12-20 17:40:21 -08:00

selinux

selinux: add the "attach_queue" permission to the "tun_socket" class