diff options
| author | Stephen Smalley <stephen.smalley.work@gmail.com> | 2026-06-18 13:55:14 -0400 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2026-07-01 17:09:53 -0400 |
| commit | 44c74d27d1b9aaa99fa8a83640c1223575262b80 (patch) | |
| tree | b06f66beb40cbdc977ac9e1f32f891435a1b168f /rust/kernel | |
| parent | dc59e4fea9d83f03bad6bddf3fa2e52491777482 (diff) | |
selinux: check connect-related permissions on TCP Fast Open
Similar to Landlock, SELinux was not updated when TCP Fast Open
support was introduced to ensure connect-related permissions are
checked when using TCP Fast Open. Update its socket_sendmsg() hook to
call selinux_socket_connect() when MSG_FASTOPEN is passed.
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/linux-security-module/20260616201615.275032-1-hexlabsecurity@proton.me/
Link: https://lore.kernel.org/linux-security-module/20260617180526.15627-2-matthieu@buffet.re/
Reported-by: Bryam Vargas <hexlabsecurity@proton.me>
Reported-by: Matthieu Buffet <matthieu@buffet.re>
Reported-by: Mikhail Ivanov <ivanov.mikhail1@huawei-partners.com>
Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Tested-by: Bryam Vargas <hexlabsecurity@proton.me>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'rust/kernel')
0 files changed, 0 insertions, 0 deletions