]> asedeno.scripts.mit.edu Git - linux.git/commit
selinux: handle ICMPv6 consistently with ICMP
authorStephen Smalley <sds@tycho.nsa.gov>
Mon, 9 Jan 2017 15:07:31 +0000 (10:07 -0500)
committerPaul Moore <paul@paul-moore.com>
Mon, 9 Jan 2017 15:07:31 +0000 (10:07 -0500)
commitef37979a2cfa3905adbf0c2a681ce16c0aaea92d
tree0616c8df6684b739648d9b4e38eab11ec7b1c1fd
parenta2c7c6fbe5ab48f6e4ed22f4649c76d1efbfe643
selinux: handle ICMPv6 consistently with ICMP

commit 79c8b348f215 ("selinux: support distinctions among all network
address families") mapped datagram ICMP sockets to the new icmp_socket
security class, but left ICMPv6 sockets unchanged.  This change fixes
that oversight to handle both kinds of sockets consistently.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/hooks.c