Mickaël Salaün 5e37fa0b4c selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket ... [ Upstream commit bbf5a1d0e5d0fb3bdf90205aa872636122692a50 ] The IPv6 network stack first checks the sockaddr length (-EINVAL error) before checking the family (-EAFNOSUPPORT error). This was discovered thanks to commit a549d055a22e ("selftests/landlock: Add network tests"). Cc: Eric Paris <eparis@parisplace.org> Cc: Konstantin Meskhidze <konstantin.meskhidze@huawei.com> Cc: Paul Moore <paul@paul-moore.com> Cc: Stephen Smalley <stephen.smalley.work@gmail.com> Reported-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Closes: https://lore.kernel.org/r/0584f91c-537c-4188-9e4f-04f192565667@collabora.com Fixes: 0f8db8cc73 ("selinux: add AF_UNSPEC and INADDR_ANY checks to selinux_socket_bind()") Signed-off-by: Mickaël Salaün <mic@digikod.net> Tested-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-01-25 14:52:34 -08:00
..
apparmor	apparmor: fix missing error check for rhashtable_insert_fast	2023-07-23 13:47:30 +02:00
bpf	…
integrity	ima: detect changes to the backing overlay file	2023-11-28 16:56:29 +00:00
keys	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	2024-01-05 15:13:30 +01:00
landlock	landlock: Fix same-layer rule unions	2022-06-09 10:23:24 +02:00
loadpin	LoadPin: Ignore the "contents" argument of the LSM hooks	2022-12-31 13:14:45 +01:00
lockdown	…
safesetid	…
selinux	selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket	2024-01-25 14:52:34 -08:00
smack	Smack:- Use overlay inode label in smack_inode_copy_up()	2023-10-06 13:18:20 +02:00
tomoyo	tomoyo: fix broken dependency on *.conf.default	2023-02-01 08:27:05 +01:00
yama	…
Kconfig	x86/retbleed: Add fine grained Kconfig knobs	2022-07-23 12:54:10 +02:00
Kconfig.hardening	security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6	2022-12-31 13:14:46 +01:00
Makefile	…
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 18:15:39 +01:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-12 11:58:59 +01:00
inode.c	…
lsm_audit.c	…
min_addr.c	…
security.c	ima: Align ima_file_mmap() parameters with mmap_file LSM hook	2023-03-10 09:40:03 +01:00