Kuniyuki Iwashima 0577f93e84 dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. ... [ Upstream commit 23be1e0e2a ] Initially, commit 4237c75c0a ("[MLSXFRM]: Auto-labeling of child sockets") introduced security_inet_conn_request() in some functions where reqsk is allocated. The hook is added just after the allocation, so reqsk's IPv6 remote address was not initialised then. However, SELinux/Smack started to read it in netlbl_req_setattr() after commit e1adea9270 ("calipso: Allow request sockets to be relabelled by the lsm."). Commit 284904aa79 ("lsm: Relocate the IPv4 security_inet_conn_request() hooks") fixed that kind of issue only in TCPv4 because IPv6 labeling was not supported at that time. Finally, the same issue was introduced again in IPv6. Let's apply the same fix on DCCPv6 and TCPv6. Fixes: e1adea9270 ("calipso: Allow request sockets to be relabelled by the lsm.") Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com> Acked-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-11-20 11:57:22 +01:00
..
ila	ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()	2023-03-01 08:48:46 +00:00
netfilter	Revert "net: Remove low_thresh in ip defrag"	2023-05-16 20:46:30 -07:00
addrconf.c	net: release reference to inet6_dev pointer	2023-10-10 22:02:55 +02:00
addrconf_core.c	net: rename reference+tracking helpers	2022-06-09 21:52:55 -07:00
addrlabel.c	ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network	2022-11-07 12:26:15 +00:00
af_inet6.c	ipv6: remove hard coded limitation on ipv6_pinfo	2023-09-02 09:13:30 +02:00
ah6.c	net: ipv6: Remove completion function scaffolding	2023-02-13 18:35:15 +08:00
anycast.c
calipso.c
datagram.c	ipv6: Fix datagram socket connection with DSCP.	2023-02-09 22:49:04 -08:00
esp6.c	net: ipv6: fix return value check in esp_remove_trailer	2023-10-25 12:16:13 +02:00
esp6_offload.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-06-22 18:40:38 -07:00
exthdrs.c	ipv6: exthdrs: Remove redundant skb_headlen() check in ip6_parse_tlv().	2023-06-19 11:32:58 -07:00
exthdrs_core.c	ipv6: Fix out-of-bounds access in ipv6_find_tlv()	2023-05-24 08:43:39 +01:00
exthdrs_offload.c
fib6_notifier.c
fib6_rules.c	ipv6: change fib6_rules_net_exit() to batch mode	2022-02-08 20:41:34 -08:00
fou6.c
icmp.c	icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().	2023-07-08 10:08:54 +01:00
inet6_connection_sock.c	net: annotate lockless accesses to sk->sk_err_soft	2023-03-17 08:25:05 +00:00
inet6_hashtables.c	tcp: Access &tcp_hashinfo via net.	2022-09-20 10:21:49 -07:00
ioam6.c	genetlink: start to validate reserved header bytes	2022-08-29 12:47:15 +01:00
ioam6_iptunnel.c	ipv6: ioam: Insertion frequency in lwtunnel output	2022-02-04 20:24:45 -08:00
ip6_checksum.c
ip6_fib.c	ipv6: remove nexthop_fib6_nh_bh()	2023-05-11 18:07:05 -07:00
ip6_flowlabel.c	ipv6: flowlabel: do not disable BH where not needed	2023-03-21 21:32:18 -07:00
ip6_gre.c	net:ipv6: check return value of pskb_trim()	2023-07-19 12:25:58 +01:00
ip6_icmp.c
ip6_input.c	ipv6: ignore dst hint for multipath routes	2023-09-19 12:30:17 +02:00
ip6_offload.c	net: move gso declarations and functions to their own files	2023-06-10 00:11:41 -07:00
ip6_offload.h
ip6_output.c	ipv6: avoid atomic fragment on GSO packets	2023-11-20 11:56:54 +01:00
ip6_tunnel.c	net: tunnels: annotate lockless accesses to dev->needed_headroom	2023-03-15 00:04:04 -07:00
ip6_udp_tunnel.c
ip6_vti.c	ip6_vti: fix slab-use-after-free in decode_session6	2023-07-11 11:06:08 +02:00
ip6mr.c	ip6mr: Fix skb_under_panic in ip6mr_cache_report()	2023-08-02 10:35:21 +01:00
ipcomp6.c	xfrm: ipcomp: add extack to ipcomp{4,6}_init_state	2022-09-29 07:18:00 +02:00
ipv6_sockglue.c	net/ipv6: Initialise msg_control_is_user	2023-04-14 11:09:27 +01:00
Kconfig	ipv6: fix indentation of a config attribute	2023-08-16 10:03:08 +01:00
Makefile	net: ipv6: use ipv6-y directly instead of ipv6-objs	2021-09-28 13:13:40 +01:00
mcast.c	ipv6: constify inet6_mc_check()	2023-03-17 08:56:37 +00:00
mcast_snoop.c	net: bridge: mcast: fix broken length + header check for MRDv6 Adv.	2021-04-27 14:02:06 -07:00
mip6.c	xfrm: mip6: add extack to mip6_destopt_init_state, mip6_rthdr_init_state	2022-09-29 07:18:01 +02:00
ndisc.c	net: change accept_ra_min_rtr_lft to affect all RA lifetimes	2023-10-10 22:02:55 +02:00
netfilter.c	netfilter: Use l3mdev flow key when re-routing mangled packets	2022-05-16 13:03:29 +02:00
output_core.c	treewide: use get_random_u32_{above,below}() instead of manual loop	2022-11-18 02:15:22 +01:00
ping.c	net: annotate data-races around sk->sk_tsflags	2023-09-19 12:30:17 +02:00
proc.c	icmp: Add counters for rate limits	2023-01-26 10:52:18 +01:00
protocol.c
raw.c	net: annotate data-races around sk->sk_tsflags	2023-09-19 12:30:17 +02:00
reassembly.c	Revert "net: Remove low_thresh in ip defrag"	2023-05-16 20:46:30 -07:00
route.c	ipv6: ignore dst hint for multipath routes	2023-09-19 12:30:17 +02:00
rpl.c	ipv6: rpl: Remove pskb(_may)?_pull() in ipv6_rpl_srh_rcv().	2023-06-19 11:32:58 -07:00
rpl_iptunnel.c	net: ipv6: rpl_iptunnel: Replace 0-length arrays with flexible arrays	2023-01-06 19:28:01 -08:00
seg6.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-09-08 18:38:30 +02:00
seg6_hmac.c	net: ipv6: unexport __init-annotated seg6_hmac_net_init()	2022-06-28 21:23:30 -07:00
seg6_iptunnel.c	seg6: Cleanup duplicates of skb_dst_drop calls	2023-05-17 09:05:47 +01:00
seg6_local.c	seg6: add PSP flavor support for SRv6 End behavior	2023-02-16 13:18:06 +01:00
sit.c	sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()	2023-04-28 09:48:14 +01:00
syncookies.c	dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.	2023-11-20 11:57:22 +01:00
sysctl_net_ipv6.c	net: sysctl: introduce sysctl SYSCTL_THREE	2022-05-03 10:15:06 +02:00
tcp_ipv6.c	ipv6: tcp: add a missing nf_reset_ct() in 3WHS handling	2023-10-10 22:03:02 +02:00
tcpv6_offload.c	net: Make gro complete function to return void	2023-05-31 09:50:17 +01:00
tunnel6.c
udp.c	udplite: fix various data-races	2023-11-20 11:56:47 +01:00
udp_impl.h	tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().	2022-10-12 17:50:37 -07:00
udp_offload.c	net: gro: fix misuse of CB in udp socket lookup	2023-07-29 17:10:27 +01:00
udplite.c	udplite: remove UDPLITE_BIT	2023-11-20 11:56:47 +01:00
xfrm6_input.c	udp: annotate data-races around udp->encap_type	2023-11-20 11:56:47 +01:00
xfrm6_output.c	xfrm: fix tunnel model fragmentation behavior	2022-03-01 12:08:40 +01:00
xfrm6_policy.c	xfrm6: fix inet6_dev refcount underflow problem	2023-10-25 12:16:13 +02:00
xfrm6_protocol.c	xfrm: add support for UDPv6 encapsulation of ESP	2020-04-28 11:28:36 +02:00
xfrm6_state.c
xfrm6_tunnel.c	xfrm: tunnel: add extack to ipip_init_state, xfrm6_tunnel_init_state	2022-09-29 07:18:00 +02:00