• S
    selinux: initialize sock security class to default value · 5dee25d0
    Stephen Smalley 提交于
    Initialize the security class of sock security structures
    to the generic socket class.  This is similar to what is
    already done in inode_alloc_security for files.  Generally
    the sclass field will later by set by socket_post_create
    or sk_clone or sock_graft, but for protocol implementations
    that fail to call any of these for newly accepted sockets,
    we want some sane default that will yield a legitimate
    avc denied message with non-garbage values for class and
    permission.
    Signed-off-by: NStephen Smalley <sds@tycho.nsa.gov>
    Signed-off-by: NPaul Moore <pmoore@redhat.com>
    5dee25d0
hooks.c 156.4 KB