Attachment 317176 Details for Bug 427486 – kernel patch

[patch] kernel patch

linux.patch (text/plain), 3.53 KB, created by Miloslav Trmač on 2008-09-19 09:56:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Miloslav Trmač

Created: 2008-09-19 09:56:42 UTC

Size: 3.53 KB

patch

obsolete

>diff --git a/security/selinux/include/av_perm_to_string.h b/security/selinux/include/av_perm_to_string.h
>index 1223b4f..16ee71e 100644
>--- a/security/selinux/include/av_perm_to_string.h
>+++ b/security/selinux/include/av_perm_to_string.h
>@@ -152,6 +152,7 @@
>    S_(SECCLASS_NETLINK_AUDIT_SOCKET, NETLINK_AUDIT_SOCKET__NLMSG_WRITE, "nlmsg_write")
>    S_(SECCLASS_NETLINK_AUDIT_SOCKET, NETLINK_AUDIT_SOCKET__NLMSG_RELAY, "nlmsg_relay")
>    S_(SECCLASS_NETLINK_AUDIT_SOCKET, NETLINK_AUDIT_SOCKET__NLMSG_READPRIV, "nlmsg_readpriv")
>+   S_(SECCLASS_NETLINK_AUDIT_SOCKET, NETLINK_AUDIT_SOCKET__NLMSG_TTY_AUDIT, "nlmsg_tty_audit")
>    S_(SECCLASS_NETLINK_IP6FW_SOCKET, NETLINK_IP6FW_SOCKET__NLMSG_READ, "nlmsg_read")
>    S_(SECCLASS_NETLINK_IP6FW_SOCKET, NETLINK_IP6FW_SOCKET__NLMSG_WRITE, "nlmsg_write")
>    S_(SECCLASS_ASSOCIATION, ASSOCIATION__SENDTO, "sendto")
>diff --git a/security/selinux/include/av_permissions.h b/security/selinux/include/av_permissions.h
>index c4c5116..c585131 100644
>--- a/security/selinux/include/av_permissions.h
>+++ b/security/selinux/include/av_permissions.h
>@@ -707,6 +707,7 @@
> #define NETLINK_AUDIT_SOCKET__NLMSG_WRITE         0x00800000UL
> #define NETLINK_AUDIT_SOCKET__NLMSG_RELAY         0x01000000UL
> #define NETLINK_AUDIT_SOCKET__NLMSG_READPRIV      0x02000000UL
>+#define NETLINK_AUDIT_SOCKET__NLMSG_TTY_AUDIT     0x04000000UL
> #define NETLINK_IP6FW_SOCKET__IOCTL               0x00000001UL
> #define NETLINK_IP6FW_SOCKET__READ                0x00000002UL
> #define NETLINK_IP6FW_SOCKET__WRITE               0x00000004UL
>diff --git a/security/selinux/include/class_to_string.h b/security/selinux/include/class_to_string.h
>index bd813c3..0d11270 100644
>--- a/security/selinux/include/class_to_string.h
>+++ b/security/selinux/include/class_to_string.h
>@@ -72,3 +72,7 @@
>     S_(NULL)
>     S_("peer")
>     S_("capability2")
>+    S_(NULL)
>+    S_(NULL)
>+    S_(NULL)
>+    S_(NULL)
>diff --git a/security/selinux/nlmsgtab.c b/security/selinux/nlmsgtab.c
>index ff59c0c..2ab6fdc 100644
>--- a/security/selinux/nlmsgtab.c
>+++ b/security/selinux/nlmsgtab.c
>@@ -99,18 +99,18 @@ static struct nlmsg_perm nlmsg_xfrm_perms[] =
> 
> static struct nlmsg_perm nlmsg_audit_perms[] =
> {
>-	{ AUDIT_GET,		NETLINK_AUDIT_SOCKET__NLMSG_READ     },
>-	{ AUDIT_SET,		NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },
>-	{ AUDIT_LIST,		NETLINK_AUDIT_SOCKET__NLMSG_READPRIV },
>-	{ AUDIT_ADD,		NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },
>-	{ AUDIT_DEL,		NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },
>-	{ AUDIT_LIST_RULES,	NETLINK_AUDIT_SOCKET__NLMSG_READPRIV },
>-	{ AUDIT_ADD_RULE,	NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },
>-	{ AUDIT_DEL_RULE,	NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },
>-	{ AUDIT_USER,		NETLINK_AUDIT_SOCKET__NLMSG_RELAY    },
>-	{ AUDIT_SIGNAL_INFO,	NETLINK_AUDIT_SOCKET__NLMSG_READ     },
>-	{ AUDIT_TTY_GET,	NETLINK_AUDIT_SOCKET__NLMSG_READ     },
>-	{ AUDIT_TTY_SET,	NETLINK_AUDIT_SOCKET__NLMSG_WRITE    },
>+	{ AUDIT_GET,		NETLINK_AUDIT_SOCKET__NLMSG_READ      },
>+	{ AUDIT_SET,		NETLINK_AUDIT_SOCKET__NLMSG_WRITE     },
>+	{ AUDIT_LIST,		NETLINK_AUDIT_SOCKET__NLMSG_READPRIV  },
>+	{ AUDIT_ADD,		NETLINK_AUDIT_SOCKET__NLMSG_WRITE     },
>+	{ AUDIT_DEL,		NETLINK_AUDIT_SOCKET__NLMSG_WRITE     },
>+	{ AUDIT_LIST_RULES,	NETLINK_AUDIT_SOCKET__NLMSG_READPRIV  },
>+	{ AUDIT_ADD_RULE,	NETLINK_AUDIT_SOCKET__NLMSG_WRITE     },
>+	{ AUDIT_DEL_RULE,	NETLINK_AUDIT_SOCKET__NLMSG_WRITE     },
>+	{ AUDIT_USER,		NETLINK_AUDIT_SOCKET__NLMSG_RELAY     },
>+	{ AUDIT_SIGNAL_INFO,	NETLINK_AUDIT_SOCKET__NLMSG_READ      },
>+	{ AUDIT_TTY_GET,	NETLINK_AUDIT_SOCKET__NLMSG_READ      },
>+	{ AUDIT_TTY_SET,	NETLINK_AUDIT_SOCKET__NLMSG_TTY_AUDIT },
> };
> 
>

Actions: View | Diff

Attachments on bug 427486: 317173 | 317174 | 317176