Mickaël Salaün 1bc7a682ed selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket ... [ Upstream commit bbf5a1d0e5 ] The IPv6 network stack first checks the sockaddr length (-EINVAL error) before checking the family (-EAFNOSUPPORT error). This was discovered thanks to commit a549d055a2 ("selftests/landlock: Add network tests"). Cc: Eric Paris <eparis@parisplace.org> Cc: Konstantin Meskhidze <konstantin.meskhidze@huawei.com> Cc: Paul Moore <paul@paul-moore.com> Cc: Stephen Smalley <stephen.smalley.work@gmail.com> Reported-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Closes: https://lore.kernel.org/r/0584f91c-537c-4188-9e4f-04f192565667@collabora.com Fixes: 0f8db8cc73 ("selinux: add AF_UNSPEC and INADDR_ANY checks to selinux_socket_bind()") Signed-off-by: Mickaël Salaün <mic@digikod.net> Tested-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-01-25 14:37:41 -08:00
..
apparmor	apparmor: fix missing error check for rhashtable_insert_fast	2023-07-27 08:44:10 +02:00
bpf
integrity	ima: annotate iint mutex to avoid lockdep false positive warnings	2023-12-08 08:46:15 +01:00
keys	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	2024-01-05 15:12:25 +01:00
loadpin	LoadPin: Ignore the "contents" argument of the LSM hooks	2023-01-14 10:16:22 +01:00
lockdown
safesetid
selinux	selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket	2024-01-25 14:37:41 -08:00
smack	Smack:- Use overlay inode label in smack_inode_copy_up()	2023-10-10 21:53:34 +02:00
tomoyo	tomoyo: fix broken dependency on *.conf.default	2023-02-01 08:23:10 +01:00
yama
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 18:14:26 +01:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-14 10:16:36 +01:00
inode.c
Kconfig	x86/retbleed: Add fine grained Kconfig knobs	2022-07-25 11:26:50 +02:00
Kconfig.hardening	hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero	2022-10-26 13:25:12 +02:00
lsm_audit.c
Makefile
min_addr.c
security.c	ima: Align ima_file_mmap() parameters with mmap_file LSM hook	2023-03-11 16:40:00 +01:00